bitrix-project-structure
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and architectural guidelines for Bitrix CMS development, including /local vs /bitrix directory usage, PSR-4 autoloading, and module management.
- [CREDENTIALS_UNSAFE]: The documentation identifies sensitive configuration files such as .settings.php and dbconn.php, correctly advising the user to set restrictive permissions (similar to system files) to protect them. No hardcoded credentials or secrets are present in the skill.
- [DYNAMIC_EXECUTION]: The skill describes standard framework mechanisms for module loading (Loader::requireModule) and routing (require $file). These are documented architectural patterns for the PHP-based Bitrix framework and do not involve processing untrusted input into executable code.
- [COMMAND_EXECUTION]: Mentions Composer and Bitrix CLI commands (make:*) in a descriptive context regarding framework features, rather than instructing the agent to execute unverified or dangerous commands.
Audit Metadata