erf-validate
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
powershell.exeto run a validation script located at a relative path${CLAUDE_SKILL_DIR}/../epf-validate/scripts/epf-validate.ps1(SKILL.md). - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill accepts an
ObjectPathargument, which points to external XML files and directories containing 1C report source code (SKILL.md). - Boundary markers: No delimiters or specific instructions to ignore embedded content within the source XML files are provided to the agent.
- Capability inventory: The skill has the capability to execute shell commands via PowerShell to perform the validation (SKILL.md).
- Sanitization: There is no evidence of input validation or sanitization for the content of the XML files being processed.
Audit Metadata