db-load-cf

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local 1C platform binaries (1cv8.exe or ibcmd.exe) to perform database operations. The Python implementation uses subprocess.Popen while the PowerShell version uses a custom P/Invoke wrapper to manage process handles correctly.
  • [DYNAMIC_EXECUTION]: Command-line arguments are assembled at runtime from user input and configuration files. Both scripts include a robust validation function (assert_extra_args) that prevents the injection of unauthorized flags or batch commands that could override the skill's intended behavior.
  • [CREDENTIALS_SAFE]: The skill processes database usernames and passwords. It includes dedicated functions (Protect-Secrets in PowerShell and _redact in Python) to ensure these sensitive values are masked with asterisks before being printed to any output logs, preventing accidental credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:16 PM