The Agent Skills Directory

[SAFE]: The skill serves as a documentation resource for Bitrix CMS developers. The code snippets provided follow standard Bitrix framework conventions for version 23.0+.
[DYNAMIC_EXECUTION]: The skill documentation includes examples of dynamic file inclusion using PHP's require and include (via PublicPageController). These are standard patterns in the Bitrix routing system to load route configurations from module directories or bridge to legacy PHP pages. The documentation explicitly warns that files included via PublicPageController must implement their own security checks (Auth, CSRF), demonstrating a security-conscious approach.
[INDIRECT_PROMPT_INJECTION]: The skill describes handling user-supplied URL parameters (e.g., {id}, {slug}). It correctly guides the developer to use regex constraints (->where('id', '\d+')) and advises using Engine Controller ActionFilters for authorization, which mitigates injection and unauthorized access risks.
[COMMAND_EXECUTION]: Examples for Apache (.htaccess) and Nginx configuration are provided for enabling routing. These are standard server configuration steps and do not involve arbitrary command execution.

bitrix-routing