meta-edit

This is a 1C metadata editing utility that reads JSON/XML, modifies and overwrites the selected metadata XML, may create table or command files, and optionally runs a local validation script. User-controlled table and command names can influence filesystem write paths without containment checks, and some generated XML attributes are not safely escaped; these are security warnings requiring input/path validation. XML parsing also lacks explicit entity restrictions. No domains, URLs, IPs, environment variables, or targeted credentials are present; severity is moderate for untrusted definitions or XML, with no clear malware behavior.