xdto-edit

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes sibling PowerShell and Python scripts (xdto-decompile, xdto-compile, xdto-validate) to perform its tasks. These calls are made using relative paths from the skill's own directory structure and handle specific package files.
  • [COMMAND_EXECUTION]: The Python script xdto-edit.py uses subprocess.run() to invoke these sibling scripts and xdto-validate. The arguments passed to these commands are derived from the skill's own logic and validated input parameters, such as file paths and operation types.
  • [REMOTE_CODE_EXECUTION]: The skill mentions a GitHub URL (https://github.com/Nikolay-Shirokov/cc-1c-skills) in its headers, which corresponds to the author's own repository for these tools. This is documented for source reference and does not involve automated remote execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 09:36 PM
Security Audit — agent-trust-hub — xdto-edit