epf-validate
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is the structural validation of 1C XML files. It performs local file system operations, including reading target files and optionally writing validation results to a file, which is within the expected scope of a validation utility.
- [SAFE]: The Python script uses the 'lxml' library for XML parsing, and the PowerShell script uses the standard .NET 'System.Xml' namespace. Both are standard, well-known libraries for these tasks.
- [SAFE]: URL references found in the scripts are limited to the author's GitHub repository for source documentation and official 1C:Enterprise XML namespace definitions. No suspicious network activity or exfiltration patterns were identified.
- [SAFE]: The skill demonstrates an indirect prompt injection surface as it ingests untrusted XML data via the ObjectPath parameter in scripts/epf-validate.ps1 and scripts/epf-validate.py. However, the risk is negligible as it only performs structural validation and does not interpolate data into prompts or use it for dynamic execution. Sanitization is performed via regex validation for identifiers and GUIDs.
Audit Metadata