The Agent Skills Directory

[DYNAMIC_EXECUTION]: The PowerShell script scripts/db-update.ps1 uses the Add-Type command to compile and execute a C# class named PlatformProcess at runtime. This C# code utilizes P/Invoke to call Win32 APIs such as CreateProcess, CreatePipe, and InitializeProcThreadAttributeList. While this is intended to manage handle inheritance and prevent process hangs during 1C platform execution, it constitutes runtime compilation of unmanaged code.
[COMMAND_EXECUTION]: Both the PowerShell and Python scripts execute the 1C Enterprise platform binaries (1cv8.exe or ibcmd) using subprocesses. The skill accepts AdditionalV8Arguments and AdditionalIbcmdArguments from the user, which are concatenated into the final shell command. Although the scripts include logic to block specific sensitive keys from being overridden, this remains a vector for arbitrary command argument injection.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted data from the local environment.
Ingestion points: The skill reads and parses the .v8-project.json file from the project root and reads console output logs (update_log.txt, check_log.txt) generated by the 1C platform.
Boundary markers: No explicit delimiters or boundary markers are used to separate the content of these files from the agent's instructions.
Capability inventory: The skill has the capability to execute system commands via the 1C platform binaries and perform file system operations in temporary directories.
Sanitization: The skill uses standard JSON parsing for the configuration file and string matching/regex for log analysis, but does not sanitize the content before presenting it to the agent.
[CREDENTIALS_UNSAFE]: The skill is designed to handle sensitive information including database usernames and passwords (-UserName, -Password, -RepositoryPassword). While the scripts implement redaction logic (Protect-Secrets in PS1, _redact in Python) to mask these values in console output, the credentials are still processed as plaintext arguments within the execution environment.

db-update