b24jssdk-frame-ui
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for utilizing the Bitrix24 JSSDK (@bitrix24/b24jssdk). It includes security best practices, such as warning developers against storing secrets in shared application options.
- [INDIRECT_PROMPT_INJECTION]: The skill documentation includes examples of ingesting data from external sources such as URL parameters, CRM entity pickers, and user selection dialogs.
- Ingestion points: Data enters the application context through placement options, URL search parameters (location.search), and UI dialog results (selectCRM, selectUser) as shown in SKILL.md.
- Boundary markers: None explicitly defined in the UI-focused code snippets, as the skill primarily handles structural data rather than natural language prompt construction.
- Capability inventory: The skill provides methods for UI manipulation (sliders, dialogs), resizing the parent frame, setting values in CRM fields (placement.setValue), and persisting application or user settings.
- Sanitization: The SDK provides serialization helpers for placement values, which helps ensure data integrity when passing values back to the host portal.
Audit Metadata