template-remove
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a PowerShell script via the
powershell.execommand line, passing user-provided object and template names directly as arguments. - [COMMAND_EXECUTION]: Both the PowerShell and Python scripts perform recursive directory and file deletions (
Remove-Itemandshutil.rmtree) using paths constructed from user input. These inputs are not sanitized for path traversal sequences like.., which could allow the deletion of files outside the targeted source directory. - [EXTERNAL_DOWNLOADS]: The scripts contain a source reference to the author's GitHub repository (
github.com/Nikolay-Shirokov/cc-1c-skills) for informational purposes.
Audit Metadata