1c-bitrix-cms-content
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local utility script
check-conventions.shand execute PHP code via CLI or administrative interfaces. These operations are legitimate and necessary for the stated purpose of managing a Bitrix CMS project. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with existing project files and handles form submissions, which represent an attack surface for indirect prompt injection. Ingestion points: Project introspection via
01-introspect-project.mdand feedback form data via10-feedback-form.md. Boundary markers: No specific boundary markers or 'ignore' instructions are explicitly provided in the skill text. Capability inventory: The skill allows for PHP execution and file system modifications within the/localdirectory. Sanitization: The skill relies on an external convention check script (check-conventions.sh) to perform manual and automated reviews before finalizing tasks.
Audit Metadata