bitrix24-ai-tools
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill utilizes tools to fetch external documentation from a remote API, creating a surface for indirect prompt injection where malicious content in the documentation could influence agent behavior.
- Ingestion points: Tools such as
bitrix-search,bitrix-method-details, andbitrix-article-detailsfetch data fromhttps://mcp-dev.bitrix24.com/mcp. - Boundary markers: The instructions do not specify boundary markers or instructions to isolate the external documentation from the agent's core logic.
- Capability inventory: The skill empowers the agent to write REST calls, build applications, and manage platform deployments based on the fetched data.
- Sanitization: There is no mention of sanitization or verification processes for the content retrieved from the external documentation server.
- [COMMAND_EXECUTION]: The skill provides instructional shell commands for users to configure Model Context Protocol (MCP) servers in their local development environment.
- Evidence: Commands for adding servers to Claude and Codex clients using
claude mcp addandcodex mcp add. - [EXTERNAL_DOWNLOADS]: The skill directs users to an official starter repository for development templates.
- Evidence: References the
github.com/bitrix24/b24-ai-starterrepository for Nuxt 3, PHP, Python, and Node.js templates.
Audit Metadata