epf-dump
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via
powershell.exe(on Windows) andsubprocess.Popen(in Python) to invoke the 1C:Enterprise platform executables (1cv8.exeoribcmd). This is the primary and intended function of the skill. - Evidence in
SKILL.md(lines 43-45),scripts/epf-dump.ps1(lines 452, 477), andscripts/epf-dump.py(lines 414, 532). - The scripts include defensive checks (
assert_extra_args,Resolve-ExtraArgs,arg_key_match) to ensure that user-provided 'additional arguments' do not override security-critical flags or inject unauthorized batch commands. - [EXTERNAL_DOWNLOADS]: The scripts reference the author's official GitHub repository (
github.com/Nikolay-Shirokov/cc-1c-skills) for source attribution. - This reference follows the [TRUST-SCOPE-RULE] as a neutral link to the author's own project and does not trigger a verdict escalation.
Audit Metadata