erf-dump
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to invokepowershell.exe, executing a script to process 1C report files. - [DYNAMIC_EXECUTION]: The instructions direct the agent to execute a PowerShell script located in a sibling directory (
${CLAUDE_SKILL_DIR}/../epf-dump/scripts/epf-dump.ps1). This represents a dependency on local external code via relative path traversal. - [CREDENTIALS_UNSAFE]: The skill provides parameters for
-UserNameand-Passwordto be passed directly as command-line arguments to the PowerShell script. This practice can result in credentials being exposed in process listings or shell history. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files to determine command arguments, creating a potential surface for indirect injection.
- Ingestion points: Reads the
.v8-project.jsonfile from the project root to resolve database paths, aliases, and branch mappings. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided for the content read from the JSON configuration.
- Capability inventory: The skill can execute shell commands via
Bash, read files, and access directory structures usingGlobandReadtools. - Sanitization: There are no explicit instructions to sanitize or validate the strings retrieved from
.v8-project.jsonbefore they are interpolated into the shell command execution.
Audit Metadata