Security audit

backup-restore

Security checks for vulnerabilities and agentic risk

Overview

This backup skill is purpose-aligned but should be reviewed because it can overwrite live data and delete old backups without clear confirmation safeguards.

Review and configure this skill carefully before installing. Use it only where the backup scope, retention policy, cloud destination, cron schedule, and restore procedure are acceptable, and require explicit approval before restoring over live files or deleting recovery points.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The restore workflow includes stopping services, extracting backups over original locations, and restarting systems, but it does not require an explicit destructive-action warning or confirmation. In a backup/restore skill, this is dangerous because an accidental or misunderstood restore can overwrite current data, prolong outages, or roll back critical state.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The documented automatic cleanup of expired backups deletes stored recovery points without a clear user-facing warning or retention confirmation. In the context of backup management, silent deletion reduces recovery options and can amplify impact after operator error, ransomware, or delayed incident discovery.

Static analysis

No suspicious patterns detected.