xdto-validate
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local validation of 1C configuration files. It uses standard XML parsing libraries (System.Xml in PowerShell and lxml in Python) to inspect package contents.
- [COMMAND_EXECUTION]: The skill executes local PowerShell or Python scripts to perform validation tasks. These scripts interact with the local filesystem solely to read package data and optionally write a validation report. There is no evidence of arbitrary command execution or shell injection vulnerabilities.
- [DATA_EXPOSURE]: The skill accesses project-specific files such as 'Package.bin' and 'Configuration.xml' to perform its validation logic. It does not access sensitive user data, credentials, or system secrets.
- [EXTERNAL_DOWNLOADS]: The scripts contain references to the author's GitHub repository for documentation purposes, but no runtime downloads or remote code execution patterns were detected.
Audit Metadata