db-dump-cf
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses PowerShell and Python scripts to execute the 1C:Enterprise designer (
1cv8.exe). Both implementations (db-dump-cf.ps1anddb-dump-cf.py) correctly pass arguments as lists or arrays, which prevents shell command injection. - [CREDENTIALS_UNSAFE]: The skill allows users to provide credentials for 1C database access via parameters. These credentials are passed directly to the local 1C executable for authentication and are not hardcoded, logged unsafely, or exfiltrated.
- [DATA_EXFILTRATION]: No network operations or data transmission patterns were found. The skill only performs local file operations such as reading configuration files and writing the output CF files.
- [EXTERNAL_DOWNLOADS]: The scripts contain a reference link to the author's GitHub repository (
Nikolay-Shirokov/cc-1c-skills). This is for documentation purposes and no code is downloaded or executed from this URL at runtime.
Audit Metadata