db-load-git
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocessin Python and direct execution in PowerShell to rungitand 1C platform executables (1cv8.exe,ibcmd.exe). These tools are essential for the skill's primary function of synchronizing repository changes with a database. - [INDIRECT_PROMPT_INJECTION]: The skill's attack surface includes Git metadata (file paths) and project configuration files (
.v8-project.json). The scripts implement security controls such asclean_pathfor path sanitization andassert_extra_argsto prevent users or repository data from injecting unauthorized command-line parameters into the platform tools. - [SAFE]: The scripts contain logic to identify and redact sensitive information (such as database passwords) from console outputs and log files, ensuring that credentials are not exposed during operation.
Audit Metadata