db-load-cf

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the 1C:Enterprise platform binary (1cv8.exe) to perform configuration loading. It uses either a PowerShell script (scripts/db-load-cf.ps1) or a Python script (scripts/db-load-cf.py) as wrappers for the platform's command-line interface.
  • The Python script uses subprocess.run with a list of arguments, which is a secure way to handle external process execution without shell injection vulnerabilities.
  • The PowerShell script uses Start-Process to invoke the platform binary.
  • [SAFE]: The skill requires the agent to ask for user confirmation via AskUserQuestion before performing the load operation, as it completely replaces the database configuration.
  • [SAFE]: While the skill handles credentials (usernames and passwords), they are passed as parameters to the script at runtime rather than being hardcoded. This is the standard authentication mechanism for the 1C platform's command-line tools.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 11:10 AM
Security Audit — agent-trust-hub — db-load-cf