bsp

bsp is a skill for Codex from brake71/1c-ssl-skills. It costs 160 tokens per session (2,398 once invoked), scanned A, original, MIT.

A guide for developing and reviewing business software in 1C with its Standard Subsystems Library, a collection of shared building blocks for common tasks.

In plain words
What is it for?
Use it when writing or reviewing 1C code for scheduled jobs, data exchange, printing, files, access control, updates, electronic signatures, and related library features.
Why use it?
It helps developers choose the correct shared modules and public functions, use their parameters correctly, and avoid obsolete or internal interfaces.

Skill for Codex

Written for Codex: agents/openai.yaml present.

Good fit Use it when writing or reviewing 1C code for scheduled jobs, data exchange, printing, files, access control, updates, electronic signatures, and related library features.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/brake71/1c-ssl-skills/bsp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add brake71/1c-ssl-skills --skill bsp
Clone the repo
git clone --depth 1 https://github.com/brake71/1c-ssl-skills

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bsp

README.md
[![agentmods](https://agentmods.dev/badge/skills/brake71/1c-ssl-skills/bsp/github.svg)](https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp)
Your own site
<a href="https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp"><img src="https://agentmods.dev/badge/skills/brake71/1c-ssl-skills/bsp/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for bsp

Your own site · 80×15
<a href="https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp"><img src="https://agentmods.dev/badge/skills/brake71/1c-ssl-skills/bsp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 160 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,398 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium analysis-evasion · line 1
    Suspicious Unicode normalization or mixed-script content
    Fix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00160 $0.02398
Opus 5.5 $0.00064 $0.00959
Sonnet 5.5 $0.00032 $0.00480
Haiku 4.5 $0.00016 $0.00240

Measured 15d ago against content hash f041f360086a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

bsp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/bsp_api.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/bsp/SKILL.md · 147 lines

How it starts

The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Using 1C:BSP 3.1.11 in application code

This router is ASCII-only so that its initial read is safe even with a legacy Windows stdout code page. The task references remain UTF-8 Russian, with exact BSL names, signatures, regions, parameters, examples and pitfalls.

Reading UTF-8 files on Windows

Use a native UTF-8 reader: rg -n . -- "PATH" reads a file; rg patterns and -A/-B/-C select a section. Replace PATH with the installed file's path; quote paths containing spaces. Alternatively, read with explicit Python UTF-8:

python -X utf8 -c "import sys; from pathlib import Path; sys.stdout.reconfigure(encoding='utf-8'); print(Path(sys.argv[1]).read_text(encoding='utf-8'))" "PATH"

Get-Content -Encoding UTF8 controls input decoding, not captured stdout. Avoid PowerShell content cmdlets and piping native readers through Select-String, Select-Object or Where-Object: they may re-encode stdout. Filter inside rg or Python instead. Apply UTF-8 reading to project files too; do not combine a safe skill read with an unsafe README read. Do not change global shell settings.

Workflow

Scope precedence: explicit BSP API review, including checking whether a method exists, requires the selected reference even when the recommendation uses platform APIs. Apply the version boundary below first. Standalone platform-only requests without BSP API review are outside this workflow; answer them directly. The presence of BSL files or a form element alone is not an integration task. A library-based migration/update write is an integration task even without an explicit BSP name or version; route it to update.md after the version check.

  1. Check the requested BSP version. For a different version, explain that these 3.1.11 references cannot confirm its signatures and request matching documentation/export; this boundary check needs no API reference. For 3.1.11 or an unspecified version, select one primary reference from the task table. Add a second only for a genuinely cross-cutting task, such as printing in a background job.
  2. Bind the installed root to the parent of the absolute SKILL.md file you successfully opened. Build the selected path as INSTALLED_ROOT/references/REFERENCE.md; each skill has its own root. Open that file before an integration/API answer. Locate the scenario using native rg -n headings/context, then check its rules, signature, example and pitfalls. The router and remembered knowledge are insufficient. If a search fails, run the reference fallback below using that same absolute SKILL.md path. A project file listing may omit hidden .agents/; it does not prove the installed reference is absent. A system skill's path is not the root of this project skill. Declare the reference unavailable only after the fallback fails; otherwise use its scenario.
  3. If the user proposes a call or rule, check its original full Module.Method name and purpose. Identify mismatches explicitly. An API signature verified for 3.1.11 is not verification for another BSP version.
  4. Prefer the stable public programmatic-interface region. Internal or deprecated APIs require an explicit warning and no public alternative. Show overridable-module hooks as implementations: BSP calls them; application code implements them, not a direct qualified module call. Exact Russian region and suffix names are documented in fundamentals.md.
  5. If a configuration XML export containing CommonModules/ is available, additionally verify each recommended signature/region with bsp_api.py. Otherwise use the supplied reference and do not claim source verification.
  6. Answer in the user's language: API, client/server execution context, minimal BSL example and important constraints. Check each full BSP call name and argument order against the reference or available export. Take application-specific object/handler names from the task or project; do not invent symmetric BSP methods. Discuss absent/internal/forbidden calls in prose or inline code, not a runnable fenced BSL example.

Read the full file on GitHub · 147 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 15d ago Changed · +16 lines · +29 tokens per session f041f360086a
  2. 17d ago Changed · +6 lines · +10 tokens per session 109942f15730
  3. 20d ago Changed · -14 lines · -36 tokens per session 5083ba8eae7f
  4. 26d ago Changed · +1 lines 78e132d260cb
  5. 1mo ago Changed · +2 lines 55978780cbd5
  6. 1mo ago Changed 16ad84bf1522
  7. 1mo ago First seen · 136 lines · 157 tokens per session scan A fe513ae3f4a6

Subscribe to this mod's changes

bsp is a skill published in the GitHub repository brake71/1c-ssl-skills (82 stars, last pushed 15d ago), licensed MIT. It adds 160 tokens to every session and 2,398 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

1c-naparnik

A connection to 1C:Naparnik, a service for analyzing BSL code and searching 1C documentation and standards. BSL is the programming language used by the 1C:Enterprise platform.

Desko77/claude-code-skills-1c · 68 tokens

1c-code-review

A code-review procedure for BSL, the programming language used by the 1C business software platform. It checks changed code against a defect catalogue and labels each finding with an identifier, severity, and location.

Desko77/claude-code-skills-1c · 82 tokens

bsl-change-review

A review skill for proposed changes to BSL code, forms, and metadata in 1C systems. It produces either a visual code difference or a copyable guide for making the changes by hand.

AzeevAN/mcp-1c · 85 tokens

xml-structure-review

A checker for XML metadata files used by 1C, a business software platform. It verifies objects, forms, layouts, roles, configuration membership, and permissions in extension roles.

Romandredan/1c-quality-gate · 119 tokens

bsl-code-review

A code-review check for BSL, the programming language used by the 1C business-software platform. It looks for static-analysis warnings, performance anti-patterns, naming issues, API signature errors, and missing shared modules.

Romandredan/1c-quality-gate · 130 tokens

bsl-architecture-review

An architecture review for 1C code, focused on how modules divide responsibilities and depend on one another. It applies design principles such as SOLID and GRASP, adapted to 1C.

Romandredan/1c-quality-gate · 150 tokens