v8unpack-cf
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and workflow instructions for a specialized developer utility aimed at 1C binary artifact management.
- [EXTERNAL_DOWNLOADS]: The skill references the
v8unpackPython package, which is to be installed viapip install "v8unpack>=1.2.6,<2". This is a standard dependency for the tool's stated functionality and originates from the official PyPI registry. - [INDIRECT_PROMPT_INJECTION]: The skill defines tools to read and extract binary data from 1C artifacts, which represents an ingestion surface for untrusted data.
- Ingestion points: Binary artifacts such as
Form.bin,.cf,.cfe, and.epffiles processed via theunpack_ordinary_formtool orv8unpackCLI. - Boundary markers: The skill instructions separate workspace contents into source and derived files, though it does not specify prompt-level delimiters for the extracted text content.
- Capability inventory: The skill is designed for file system operations, specifically reading, unpacking, and building binary containers.
- Sanitization: No specific sanitization of the extracted BSL code or layout trees is described, which is expected for a low-level development utility.
Audit Metadata