1c-bitrix-cms-commerce
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill references the execution of a local shell script
../../shared/scripts/check-conventions.sh. This script is intended to verify project conventions after tasks are completed. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of data from external sources, specifically through 1C exchange mechanisms (CommerceML). Ingesting untrusted XML or external data files presents a potential attack surface for indirect prompt injection. The skill partially mitigates risk by instructing the use of official Bitrix D7 APIs (
\Bitrix\Sale\Order,\Bitrix\Sale\Basket) for operations instead of direct SQL commands.
Audit Metadata