Security audit

backup-manager

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed backup helper whose file, command, and rotation behavior fits its stated purpose, with care needed around scope, secrets, and automatic rotation.

Before installing, decide which project folders are in scope, where archives should be stored, whether secrets such as .env files are excluded or separately encrypted, and how many old backups may be deleted during rotation.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger guidance includes the phrase 'User says "back this up" or "do we have a backup?" → act, don't ask,' which encourages automatic invocation from common conversational language rather than a narrowly scoped, explicit command. In an agent environment with write and exec permissions, this can cause unintended backup actions, archive creation, storage consumption, or handling of sensitive files without sufficient confirmation or scoping.

Static analysis

No suspicious patterns detected.