1c-bitrix-cms-settings
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and modify project-specific configuration files such as
.settings.phpandinit.php. These files could potentially contain malicious instructions if the project directory is untrusted. - Ingestion points: Reads PHP configuration files and event handlers from the
/localdirectory of a Bitrix installation. - Boundary markers: The skill does not define explicit delimiters to differentiate between code structure and embedded instructions within the processed files.
- Capability inventory: The skill can create/modify files and execute local scripts.
- Sanitization: No evidence of data validation or instruction filtering for the content read from the project files.
- [COMMAND_EXECUTION]: The skill references a local shell script for project validation.
- Script:
../../shared/scripts/check-conventions.shis invoked at the end of the workflow to verify the project structure.
Audit Metadata