db-create

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the 1C:Enterprise platform (1cv8.exe) and PowerShell scripts to create and configure databases. All command parameters are constructed using structured arguments based on project configuration and user-provided inputs.
  • [REMOTE_CODE_EXECUTION]: Analysis of the Python script confirms that the subprocess.run call utilizes a safe list-based argument structure, which prevents command injection by avoiding shell execution. No remote code or external scripts are downloaded or executed.
  • [DATA_EXFILTRATION]: The skill interacts with local project configuration files and temporary logs. These operations are limited to the local file system with no evidence of network-based exfiltration or unauthorized data access.
  • [PROMPT_INJECTION]: The skill processes output from command-line logs and configuration files. While this creates an indirect data ingestion point, it is restricted to local system outputs and does not represent a credible threat vector in the context of this tool.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 11:10 AM
Security Audit — agent-trust-hub — db-create