form-info
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs intended analysis of 1C metadata files ('Form.xml', 'Module.bsl', 'ParentConfigurations.bin'). The file access is restricted to the directory tree of the target form.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data as it reads and summarizes external files. 1. Ingestion points: 'scripts/form-info.ps1' and 'scripts/form-info.py' read 'Form.xml' and 'Module.bsl'. 2. Boundary markers: None present in the output summary. 3. Capability inventory: Uses PowerShell and Python file system APIs to read local files; uses 'lxml' and regex to parse content. 4. Sanitization: The scripts use structured parsing (XML) and specific regex patterns to extract metadata, effectively ignoring unrelated content in the input files.
Audit Metadata