form-edit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a PowerShell script (form-edit.ps1) located in the skill's script directory to perform transformations on 1C form XML files. This is consistent with the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill processes external XML and JSON data, creating an attack surface for indirect prompt injection. However, no evidence of malicious exploitation was found.
- Ingestion points: The skill reads configuration data from user-supplied JSON files and existing Form.xml files.
- Boundary markers: The documentation does not specify the use of delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill is configured to use the Bash tool for script execution and possesses Read/Write access to the filesystem for 1C metadata.
- Sanitization: No sanitization or validation mechanisms are mentioned in the reference documentation for the input data.
Audit Metadata