subsystem-validate
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local PowerShell and Python scripts (
subsystem-validate.ps1andsubsystem-validate.py) to perform structural validation of 1C metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests XML data, which constitutes a vulnerability surface for indirect prompt injection attacks.\n - Ingestion points: Local XML files targeted by the SubsystemPath parameter in both the PowerShell and Python implementations.\n
- Boundary markers: Absent. The scripts do not utilize delimiters or specific instructions to ensure the agent ignores potential commands embedded within the XML content.\n
- Capability inventory: File system read and write access, and the ability to execute shell commands via the scripts.\n
- Sanitization: The skill relies on standard XML parsing libraries without explicit security configurations to mitigate risks such as XML External Entity (XXE) resolution or other injection patterns.
Audit Metadata