The Agent Skills Directory

[DYNAMIC_EXECUTION]: Bitrix mail templates are compiled into PHP source code at save time and executed when emails are triggered. While this is standard functionality for the platform, it constitutes a dynamic execution vector that requires administrative privileges to manage safely.
Evidence: rules/templates.md states: 'On save, the body is compiled to PHP (MESSAGE_PHP) and executed on send... Only trusted admins should edit templates.'
[INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface where untrusted data can be injected into email content or headers if framework-specific safety features are bypassed.
Ingestion points: User-supplied data passed through the C_FIELDS array in Event::send() or Event::sendImmediate() methods.
Boundary markers: The framework uses #FIELD# (raw insertion) and #HTML_FIELD# (escaped insertion) as template delimiters. The skill explicitly warns that using the raw macro for user data leads to HTML injection.
Capability inventory: The skill utilizes network capabilities to send mail via SMTP or the PHP mail() function, and file capabilities when handling attachments.
Sanitization: The documentation recommends using the check_email() function to validate addresses and employing the #HTML_FIELD# macro to sanitize strings within HTML templates. It also warns against dynamically building C_FIELDS keys from user input, as keys starting with = are interpreted as raw email headers (header injection).

bitrix-mail