db-update
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to automate the update of 1C:Enterprise database configurations using the official
1cv8.exeplatform binary. - The execution logic is encapsulated in
scripts/db-update.ps1(PowerShell) andscripts/db-update.py(Python). - In the Python script,
subprocess.runis used with a list of arguments and withoutshell=True, which is the recommended practice to prevent command injection. - In the PowerShell script,
Start-Processwith a structured-ArgumentListis used, which similarly isolates parameters from the shell environment. - [SAFE]: No malicious patterns, obfuscation, or unauthorized network activity were detected.
- The skill correctly handles sensitive parameters like passwords as standard command-line arguments required by the target platform, rather than hardcoding them.
- External resource references (e.g., GitHub source link) point to the author's own repository, consistent with the provided vendor context.
- The skill's behavior strictly aligns with its stated purpose of managing 1C database configurations.
Audit Metadata