bitrix-request-response
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: No dangerous shell commands, subprocess calls, or unauthorized script executions were identified. The skill focuses on using internal framework APIs.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or remote code fetching. All references are to internal framework classes and standard PHP practices.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive configuration files are exposed. The documentation explicitly advises users to keep sensitive encryption keys out of version control systems.
- [PROMPT_INJECTION]: There are no instructions that attempt to override agent behavior, bypass safety filters, or extract system prompts.
- [DATA_EXFILTRATION]: No network operations or patterns for sending data to external domains were detected. The skill guides the agent on how to correctly structure responses back to the local application context.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external HTTP request data (an attack surface), it includes specific warnings that input must be treated as untrusted and provides defensive utilities like path traversal checks and typed input dictionaries.
Audit Metadata