The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill defines and manages a configuration file (.v8-project.json) that explicitly stores 1C database credentials in plain text. The instructions and file examples include user and password fields with hardcoded values, which facilitates the exposure of sensitive access tokens and passwords.
[COMMAND_EXECUTION]: The skill provides templates for generating command-line strings for 1C (e.g., /N"" /P"") using data from the local registry. As these fields are not sanitized and are controlled by the content of the JSON file, they present a command injection risk when used by an agent to execute shell commands.
[CREDENTIALS_UNSAFE]: The persistence of database connection strings and credentials in an unencrypted file within the project directory creates a data exposure risk, as these secrets can be read by any process or user with access to the project filesystem.

db-list