cfe-init
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local PowerShell (
cfe-init.ps1) and Python (cfe-init.py) scripts to automate the creation of directory structures and XML files. These scripts are bundled with the skill and operate on paths provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes existing 1C configuration files (XML) from a user-specified path to automatically determine compatibility modes and language settings. It implements sanitization logic (
Esc-XmlTextin PowerShell andesc_xml_textin Python) to escape special characters when interpolating this external data into the generated output files. - [EXTERNAL_DOWNLOADS]: The skill references the author's official GitHub repository (
https://github.com/Nikolay-Shirokov/cc-1c-skills) in the script headers for source attribution. It does not perform any automated downloads or remote code execution during runtime.
Audit Metadata