db-load-cf
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the 1C:Enterprise platform binary (
1cv8.exe) to perform configuration loading. It uses either a PowerShell script (scripts/db-load-cf.ps1) or a Python script (scripts/db-load-cf.py) as wrappers for the platform's command-line interface. - The Python script uses
subprocess.runwith a list of arguments, which is a secure way to handle external process execution without shell injection vulnerabilities. - The PowerShell script uses
Start-Processto invoke the platform binary. - [SAFE]: The skill requires the agent to ask for user confirmation via
AskUserQuestionbefore performing the load operation, as it completely replaces the database configuration. - [SAFE]: While the skill handles credentials (usernames and passwords), they are passed as parameters to the script at runtime rather than being hardcoded. This is the standard authentication mechanism for the 1C platform's command-line tools.
Audit Metadata