Bitrix security
Skill bxmaximum/bitrix-framework-skills/skills/bitrix-security
AI-скиллы для Bitrix Framework (D7): ORM, контроллеры, роутинг, кеш, безопасность. npx skills add bxmaximum/bitrix-framework-skills. Открытый проект сообщества BXMax.
npx -y skills add bxmaximum/bitrix-framework-skills --skill bitrix-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
3 things to look at
- 22 days oldThe repository was created 22 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 13 stars13 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
CSRF, XSS, SQLi, SSRF, JWT/JWK, access rights, encryption. Use when handling input or auditing security.
SKILL.md
1.2 KB, 288 tokens by cl100k_base, as published. Nobody here has run it
Security in Bitrix
Baseline: main 23.0+. Features newer than baseline are marked Since.
Progressive disclosure: open only the rule files that match the task. Do not read every rules/*.md.
How to use
- Identify the layer the task touches.
- Open the matching
rules/*.mdbelow. - Prefer framework-native Bitrix patterns over custom abstractions.
Choose a rule file
When to read rules/csrf-xss.md
Read rules/csrf-xss.md (CSRF and XSS) when the task involves:
- CSRF
- XSS and HTML Sanitization
- CSRF Details
When to read rules/sql-ssrf.md
Read rules/sql-ssrf.md (SQL injection and SSRF) when the task involves:
- SSRF
- SQL Injections
When to read rules/jwt-crypto-access.md
Read rules/jwt-crypto-access.md (JWT, crypto, access, cookies) when the task involves:
- JWT / JWK
- Access Rights
- Secure Cookies
- Value Encryption
- Miscellaneous
- Checklist
Checklist
- Opened only the rule file(s) needed for this task.
- Followed DI /
/local// security canons fromAGENTS.md.