The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local 1C platform binaries (1cv8.exe and ibcmd.exe) using PowerShell and Python subprocesses. It includes specific logic to sanitize paths (clean_path) by rejecting quotes and whitespace, and it implements an argument blacklist to prevent users from overriding critical command-line parameters or injecting batch commands.
[DYNAMIC_EXECUTION]: The PowerShell script scripts/db-dump-cf.ps1 uses the Add-Type cmdlet to compile C# source code at runtime. This code implements a custom PlatformProcess class used to manage process handle inheritance and prevent hung processes, which is a form of dynamic execution of embedded source code.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse .v8-project.json files from the user's workspace to resolve database connection parameters.
Ingestion points: Reads .v8-project.json in both scripts/db-dump-cf.ps1 and scripts/db-dump-cf.py.
Boundary markers: The skill instructs the agent on how to map data but does not use explicit boundary delimiters for the JSON content itself.
Capability inventory: File system read/write, directory creation, and shell command execution via subprocesses.
Sanitization: The scripts use a sophisticated validation layer that checks for quote injection, path traversal via drive-relative paths, and blacklists sensitive 1C command-line arguments (/P, /N, --password, etc.).

db-dump-cf