1c-bitrix-cms-quality
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the execution of a local shell script
../../shared/scripts/check-conventions.shagainst a project directory. This is standard for QA workflows but involves executing code within the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external project files, creating an attack surface where malicious content in those files could influence the agent's behavior.
- Ingestion points: The project directory passed to
check-conventions.shand the files inspected via CLI introspection. - Boundary markers: None identified in the provided skill text.
- Capability inventory: Shell script execution and CLI-based project structure introspection.
- Sanitization: No sanitization or validation steps are documented for the analyzed project data.
Audit Metadata