bitrix-sprint-migration
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
migrate.phpCLI tool using thephpcommand to perform migration tasks such as adding, listing, or applying migrations. This is the primary and intended function of the migration tool. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests data from the Bitrix environment (database schema, Highload blocks, etc.) to generate or apply migrations.
- Ingestion points: Data is read via Helper classes (e.g.,
Iblock(),Hlblock()) and exchange files as described inrules/helpers-builders.mdandrules/writing.md. - Boundary markers: The instructions do not explicitly define boundary markers for prompt interpolation of this data.
- Capability inventory: The skill uses
phpCLI execution (rules/cli-config.md) and database write operations via Bitrix ORM and helpers (rules/writing.md). - Sanitization: The skill recommends using
SqlHelperfor escaping raw SQL and prefers the D7 ORM, which provides built-in sanitization, as noted inrules/writing.md. - [EXTERNAL_DOWNLOADS]: The skill references the
andreyryabin/sprint.migrationpackage for installation via Composer and provides a link to its official documentation on GitHub. These are standard references for the Bitrix development ecosystem.
Audit Metadata