cfe-validate
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs static structural validation of 1C configuration extension files by analyzing local XML source code.
- [DATA_EXFILTRATION]: The scripts read local files for validation purposes based on user-provided paths or project configurations (
.v8-project.json). No network exfiltration or credential harvesting patterns were detected. - [REMOTE_CODE_EXECUTION]: No remote code execution or external download patterns were identified. The validation logic is self-contained within the provided scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local data from 1C source XML files and project metadata.
- Ingestion points: Local files at
ExtensionPath,ConfigPath, and.v8-project.json. - Boundary markers: Absent.
- Capability inventory: Local file system read and write (if
OutFileis specified). - Sanitization: Structural parsing via
lxmlandSystem.Xml.XmlDocument. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill uses the standard
lxmllibrary for XML parsing in Python andSystem.Xmlin PowerShell. No external package installations or unverified dependency downloads are present.
Audit Metadata