1c-bitrix-cms-seo
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external markdown files located in shared knowledge base directories.
- Ingestion points: The skill reads multiple recipes and API maps from
../../shared/kb/recipes/seo/and../../shared/kb/api-map.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat this external data as untrusted or to ignore embedded instructions.
- Capability inventory: The agent has the ability to write code, modify files, and execute shell scripts.
- Sanitization: The skill does not define any validation or filtering mechanisms for the data retrieved from the shared directories.
- [COMMAND_EXECUTION]: The skill instructs the agent to run a shell script (
check-conventions.sh) located at../../shared/scripts/. This execution pattern allows for the invocation of local scripts with arguments, which could be leveraged if the environment or the scripts themselves are compromised.
Audit Metadata