bitrix-sprint-migration

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the migrate.php CLI tool using the php command to perform migration tasks such as adding, listing, or applying migrations. This is the primary and intended function of the migration tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests data from the Bitrix environment (database schema, Highload blocks, etc.) to generate or apply migrations.
  • Ingestion points: Data is read via Helper classes (e.g., Iblock(), Hlblock()) and exchange files as described in rules/helpers-builders.md and rules/writing.md.
  • Boundary markers: The instructions do not explicitly define boundary markers for prompt interpolation of this data.
  • Capability inventory: The skill uses php CLI execution (rules/cli-config.md) and database write operations via Bitrix ORM and helpers (rules/writing.md).
  • Sanitization: The skill recommends using SqlHelper for escaping raw SQL and prefers the D7 ORM, which provides built-in sanitization, as noted in rules/writing.md.
  • [EXTERNAL_DOWNLOADS]: The skill references the andreyryabin/sprint.migration package for installation via Composer and provides a link to its official documentation on GitHub. These are standard references for the Bitrix development ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 12:12 AM