db-load-xml
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popenindb-load-xml.pyandInvoke-PlatformProcessindb-load-xml.ps1to execute the 1C:Enterprise platform executables (1cv8.exeoribcmd.exe). This is the primary and intended function of the skill to perform database configuration loads. The scripts include robust sanitization for paths and arguments to prevent command injection. - [INDIRECT_PROMPT_INJECTION]: The skill processes external XML configuration files and
.v8-project.jsonproject metadata. - Ingestion points: Reads XML source files from a directory specified by the user and parses
.v8-project.jsonfor database connection details. - Boundary markers: The skill output is clearly labeled with "--- Log ---" and "--- Вывод платформы ---" to help the agent distinguish between tool output and instructions.
- Capability inventory: The skill can execute local platform binaries and write temporary log files in the system temp directory.
- Sanitization: The skill validates file paths and employs strict argument parsing. It does not interpolate the content of the XML files directly into prompts, but rather reports the status of the loading operation.
- [CREDENTIALS_SAFE]: The skill handles 1C database credentials. It includes specific logic (
Protect-Secretsin PowerShell and_redactin Python) to ensure passwords and sensitive tokens are replaced with asterisks before being printed to the console or logs.
Audit Metadata