epf-dump
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local 1C:Enterprise platform binary (
1cv8.exe) to perform the file decompilation. This is done through a PowerShell script or a Python script depending on the environment. - Evidence:
scripts/epf-dump.ps1usesStart-Processwith arguments to launch the designer mode of the 1C platform. - Evidence:
scripts/epf-dump.pyusessubprocess.run()to execute the platform binary. - [SAFE]: The skill accepts database credentials (username and password) as command-line arguments. This is a legitimate requirement for the 1C platform's 'Dump' command to preserve reference types (like CatalogRef or DocumentRef) which would otherwise be lost. These credentials are used only for the local process and are not exfiltrated.
- [SAFE]: The source code references an external repository (
github.com/Nikolay-Shirokov/cc-1c-skills) which belongs to the skill's author. This is documented for informational purposes and does not involve runtime code downloads.
Audit Metadata