db-load-dt
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local 1C:Enterprise platform binaries (such as 1cv8.exe or ibcmd) to perform database restoration. It employs strict path sanitization (handling quotes, whitespace, and drive formats) and argument filtering to prevent malicious command injection via user-supplied parameters.
- [DYNAMIC_EXECUTION]: The PowerShell script utilizes the Add-Type command to compile an embedded C# helper class at runtime. This class is designed for low-level process handle management to prevent the agent environment from hanging when the platform process spawns child handlers. The code is provided in-line and does not involve remote code fetching.
- [INDIRECT_PROMPT_INJECTION]: The skill processes configuration data from local .v8-project.json files. Ingestion occurs through project configuration and user-supplied arguments. While this creates a potential injection surface for platform arguments, the scripts implement strict validation using allow-lists (V8_OWNED_KEYS, V8_BATCH_KEYS) and path sanitization to ensure that critical connection and operation parameters cannot be manipulated by untrusted data.
Audit Metadata