db-repo

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The PowerShell script (scripts/db-repo.ps1) uses Add-Type to compile an embedded C# class (PlatformProcess) at runtime.\n
  • Evidence: Source code for the PlatformProcess class is defined as a string and compiled during execution to interface with low-level Windows APIs (kernel32.dll).\n
  • Purpose: The code is used to manage child process handle inheritance, preventing the agent from hanging when the 1C platform launches background processes.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes output from the 1C platform which could theoretically contain malicious instructions if the repository data is compromised.\n
  • Ingestion points: Console output and log files from 1cv8.exe are read and parsed in scripts/db-repo.ps1 and scripts/db-repo.py.\n
  • Boundary markers: Platform output is clearly labeled and separated in the display using specific delimiter headers.\n
  • Capability inventory: The skill can execute various 1C platform commands, manage repository users, and perform file system operations (scripts/db-repo.py, scripts/db-repo.ps1).\n
  • Sanitization: The scripts parse the logs for specific status messages but do not perform deep sanitization of the raw output text.\n- [COMMAND_EXECUTION]: The skill executes shell commands and the 1C platform executable using parameters provided by the user.\n
  • Evidence: Both scripts use subprocess.Popen or Process.Start to run 1cv8.exe based on arguments derived from user input or project configuration.\n
  • Mitigation: The scripts include logic to redact passwords and secrets from the command-line display to prevent accidental credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:17 PM