cf-info
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
powershell.exeto execute a local script (cf-info.ps1) for parsing configuration files. This is standard behavior for the tool's stated purpose of analyzing 1C metadata. - [REMOTE_CODE_EXECUTION]: Both the PowerShell and Python scripts include a comment pointing to a GitHub source (
https://github.com/Nikolay-Shirokov/cc-1c-skills). This is a neutral reference to the author's repository and does not involve automated remote code execution. - [DATA_EXPOSURE]: The skill reads local XML files related to 1C Enterprise configurations (e.g.,
Configuration.xml,HomePageWorkArea.xml). This access is explicitly required for its function and does not involve exfiltration of sensitive system credentials or PII.
Audit Metadata