Aguara Watch

backup-disaster-recovery

skills-sh:aj-geddes_useful-ai-prompts__backup-disaster-recovery

View source
C
55/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

4

Score

55/100

HIGH 3
LOW 1

Findings (4)

HIGH
Code block labeled "markdown" contains executable content
L28

Code block labeled "markdown" contains executable content

# postgres-backup-cronjob.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: backup-script
  namespace: databases
data:
  backup.sh: |
    #!/bin/bash
    set -euo pipefail

    BACKUP_DIR="/backup...
FIX

Align the tool description with what the code actually does. If the description says one thing but the code does another, update the description to be accurate or fix the code.

FP?

Likely FP if the NLP analyzer misinterpreted technical jargon or the description accurately describes behavior through domain-specific terminology.

HIGH
AWS access key
L205

Detects AWS access key IDs

AKIAIOSFODNN7EXAMPLE
FIX

Remove the AWS access key from the skill definition and use environment variables or IAM roles instead. Rotate the exposed key immediately via the AWS console.

FP?

Likely FP if the matched string is a placeholder (e.g., AKIAEXAMPLE), a documentation example, or a test fixture key that is not valid.

HIGH
Code block labeled "markdown" contains executable content
L373

Code block labeled "markdown" contains executable content

# route53-failover.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: failover-config
  namespace: operations
data:
  failover.sh: |
    #!/bin/bash
    set -euo pipefail

    PRIMARY_REGION="us-ea...
FIX

Align the tool description with what the code actually does. If the description says one thing but the code does another, update the description to be accurate or fix the code.

FP?

Likely FP if the NLP analyzer misinterpreted technical jargon or the description accurately describes behavior through domain-specific terminology.

LOW
Shell script file execution
L129

Detects execution of shell script files via bash/sh command or direct invocation

bash /backup/backup.sh
FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.