db-load-git
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local system commands to perform its primary function, including
git(for change detection),powershell.exe(to run the provided automation script), and the 1C:Enterprise executable1cv8.exe(to apply configuration changes). - [COMMAND_EXECUTION]: In the Python implementation (
scripts/db-load-git.py),subprocess.runis used with list-based arguments to execute external binaries, which is a secure practice that avoids shell-injection vulnerabilities. - [COMMAND_EXECUTION]: In the PowerShell implementation (
scripts/db-load-git.ps1),Start-Processis used with a defined argument list to launch the 1C platform, ensuring parameters like credentials and paths are handled without shell expansion risks.
Audit Metadata