db-cfe-admin
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes 1C:Enterprise platform utilities (1cv8.exe and ibcmd.exe) via subprocess.Popen in Python and Process.Start or a Win32 API wrapper in PowerShell. These operations are necessary for the skill's stated purpose of database administration.
- [DYNAMIC_EXECUTION]: In scripts/db-cfe-admin.ps1, the skill uses Add-Type to compile a C# helper class (PlatformProcess) at runtime. This class implements advanced process creation using the CreateProcess API to explicitly manage handle inheritance, which is a defensive measure against resource leaks and accidental data exposure to child processes.
- [CREDENTIALS_UNSAFE]: The skill handles database and repository credentials (usernames and passwords). It mitigates the risk of accidental exposure by implementing redaction functions (Protect-Secrets and _redact) that mask these values in console output and logs before they are displayed to the agent or user.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local configuration files and platform outputs.
- Ingestion points: Reads .v8-project.json from the project root and parses output from the 1C platform logs.
- Boundary markers: Uses ConvertFrom-Json and custom line-based parsers to isolate data fields.
- Capability inventory: Includes capabilities to delete configuration extensions and modify security properties (SafeMode, Active status) of the infobase.
- Sanitization: Implements clean_path logic to strip unexpected quotes and whitespace, preventing basic command injection attempts into the platform's argument string.
Audit Metadata