db-load-xml
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the official 1C:Enterprise platform executable (
1cv8.exe) using PowerShell and Python scripts. This is the core functionality required to load configuration data into a database. - [CREDENTIALS_UNSAFE]: The scripts handle database credentials (username and password) provided by the user. These are passed directly to the 1C platform's command-line interface as required for automation. There is no evidence of these credentials being stored, logged, or exfiltrated.
- [SAFE]: Static analysis flagged a potential homoglyph in
SKILL.md. This is a false positive; the detector identified a Cyrillic filename (Номенклатура.xml) which it mistook for a domain name due to the.xmlextension. - [SAFE]: The skill includes explicit instructions for the agent to request user confirmation before performing a full configuration load, which prevents accidental data loss.
Audit Metadata