bitrix-database

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation on how to use the Bitrix database API correctly and safely. It emphasizes key security invariants, such as using SqlExpression placeholders and SqlHelper (forSql, quote) for all data reaching the SQL layer, which effectively mitigates SQL injection risks.
  • [SAFE]: Configuration examples for database connections in .settings.php use safe placeholders (e.g., 'password' => '***') and refer to standard system paths for hooks and logging. The mention of SqlTracker for logging queries to /var/log/bitrix/sql.log is a standard developer tool for performance monitoring.
  • [SAFE]: No obfuscation techniques, unauthorized command executions, persistence mechanisms, or privilege escalation patterns were found. The skill is entirely focused on providing legitimate technical documentation for software development within the Bitrix ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 12:12 AM