db-load-cf
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local 1C platform binaries (
1cv8.exeoribcmd.exe) to perform database operations. The Python implementation usessubprocess.Popenwhile the PowerShell version uses a custom P/Invoke wrapper to manage process handles correctly. - [DYNAMIC_EXECUTION]: Command-line arguments are assembled at runtime from user input and configuration files. Both scripts include a robust validation function (
assert_extra_args) that prevents the injection of unauthorized flags or batch commands that could override the skill's intended behavior. - [CREDENTIALS_SAFE]: The skill processes database usernames and passwords. It includes dedicated functions (
Protect-Secretsin PowerShell and_redactin Python) to ensure these sensitive values are masked with asterisks before being printed to any output logs, preventing accidental credential exposure.
Audit Metadata