db-load-git

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess in Python and direct execution in PowerShell to run git and 1C platform executables (1cv8.exe, ibcmd.exe). These tools are essential for the skill's primary function of synchronizing repository changes with a database.
  • [INDIRECT_PROMPT_INJECTION]: The skill's attack surface includes Git metadata (file paths) and project configuration files (.v8-project.json). The scripts implement security controls such as clean_path for path sanitization and assert_extra_args to prevent users or repository data from injecting unauthorized command-line parameters into the platform tools.
  • [SAFE]: The scripts contain logic to identify and redact sensitive information (such as database passwords) from console outputs and log files, ensuring that credentials are not exposed during operation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:16 PM