The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local 1C platform binaries (1cv8.exe or ibcmd.exe) using PowerShell and Python scripts. These executions are core to the skill's functionality for dumping database metadata.
[DYNAMIC_EXECUTION]: The script scripts/db-dump-xml.ps1 utilizes the Add-Type cmdlet to compile an embedded C# class (PlatformProcess) at runtime. This class uses Win32 API calls (CreateProcess, InitializeProcThreadAttributeList) to manage process handles and inheritance, ensuring the platform does not hang on exit.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it reads configuration from .v8-project.json files within the user's workspace.
Ingestion points: Project configuration is loaded from .v8-project.json in scripts/db-dump-xml.ps1 and scripts/db-dump-xml.py.
Boundary markers: Absent; values from the JSON are interpolated into command-line arguments.
Capability inventory: The skill can execute the 1C platform with arbitrary arguments provided through -AdditionalV8Arguments and -AdditionalIbcmdArguments.
Sanitization: The scripts implement path cleaning (clean_path) and a protective blocklist (Assert-ExtraArgs) to prevent the override of critical parameters like database paths or passwords through the additional arguments fields.
[CREDENTIALS_UNSAFE]: The skill processes plaintext database credentials provided as arguments (-UserName, -Password). It mitigates exposure risks by implementing a redaction function (Protect-Secrets in PowerShell and _redact in Python) that masks these secrets before printing command strings to the console logs.

db-dump-xml