cfe-borrow

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate developer tool designed for 1C metadata management. It automates the tedious task of manually creating and updating XML structures in 1C extensions.
  • [SAFE]: File system operations are performed using secure, platform-native path resolution methods (Join-Path in PowerShell and os.path.join in Python) to prevent path traversal issues.
  • [SAFE]: XML processing is handled via standard, well-established libraries (System.Xml.XmlDocument in .NET/PowerShell and lxml in Python) which safely parse and manipulate metadata without executing content as code.
  • [SAFE]: The skill logic correctly generates unique identifiers (UUIDs) and maintains structural integrity of the 1C metadata format.
  • [SAFE]: No network operations or external data exfiltration patterns were detected; all operations are local to the user-specified project directories.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 11:10 AM
Security Audit — agent-trust-hub — cfe-borrow