Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Nikolay-Shirokov/cc-1c-skills --skill db-listgit clone --depth 1 https://github.com/Nikolay-Shirokov/cc-1c-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nikolay-shirokov/cc-1c-skills/db-list)<a href="https://agentmods.dev/skills/nikolay-shirokov/cc-1c-skills/db-list"><img src="https://agentmods.dev/badge/skills/nikolay-shirokov/cc-1c-skills/db-list/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nikolay-shirokov/cc-1c-skills/db-list"><img src="https://agentmods.dev/badge/skills/nikolay-shirokov/cc-1c-skills/db-list.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium analysis-evasion · line 1 Suspicious Unicode normalization or mixed-script contentFix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.02674 |
| Opus 5.5 | $0.00018 | $0.01070 |
| Sonnet 5.5 | $0.00009 | $0.00535 |
| Haiku 4.5 | $0.00005 | $0.00267 |
Grade A, and why
db-list scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 223 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/db-list — Управление реестром баз данных
Управляет файлом .v8-project.json — реестром информационных баз проекта. Файл хранит параметры подключения, алиасы, привязку к веткам Git.
Usage
/db-list — показать список баз
/db-list add — добавить базу (интерактивно)
/db-list remove <id> — удалить базу из реестра
/db-list show <id|alias> — подробности по базе
Формат .v8-project.json
Файл размещается в корне проекта (рядом с .git/).
{
"v8path": "C:\\Program Files\\1cv8\\8.3.25.1257\\bin",
"v8args": ["/UseHwLicenses+"],
"databases": [
{
"id": "dev",
"name": "Разработка",
"type": "file",
"path": "C:\\Bases\\MyApp_Dev",
"v8path": "C:\\Program Files\\1cv8\\8.3.27.1688\\bin",
"user": "Admin",
"password": "",
"aliases": ["dev", "разработка"],
"branches": ["dev", "develop", "feature/*"],
"configSrc": "C:\\WS\\myapp\\cfsrc",
"repository": {
"path": "\\\\srv01\\repo\\MyApp",
"user": "Ivanov",
"password": ""
},
"extensions": [
{
"name": "МоёРасширение",
"src": "src\\cfe\\МоёРасширение",
"repository": { "path": "\\\\srv01\\repo\\MyApp_Ext", "user": "Ivanov", "password": "" }
}
]
},
{
"id": "test",
"name": "Тестовая",
"type": "server",
"server": "srv01",
"ref": "MyApp_Test",
"user": "Admin",
"password": "123",
"aliases": ["test", "тест"]
}
],
"default": "dev"
}
Поля корневого объекта
| Поле | Тип | Описание |
|---|---|---|
v8path |
string | Каталог bin платформы 1С. Необязательный — если не задан, автоопределение |
v8args |
array | Доп. аргументы запуска 1cv8.exe для всех навыков, напр. ["/UseHwLicenses+"] |
ibcmdargs |
array | Доп. аргументы ibcmd (форма --ключ=значение) |
newObjectPosition |
"end" / "byName" |
Куда попадает новый объект в составе конфигурации: в конец своего вида (по умолчанию) или на место по имени. Переопределяется в databases[] |
extensionApplyCheck |
bool | Проверять ли применимость расширения после загрузки в базу (по умолчанию true). Разово отключается ключом -NoApplyCheck |
externalCheck |
bool | Проверять ли исходники внешней обработки/отчёта платформой перед сборкой (по умолчанию true). Разово отключается ключом -Checks off |
xsdPath |
string | Каталог XSD-схем платформы для проверки выгрузок по версиям формата; по умолчанию .v8-xsd рядом с этим файлом. Наполняется /v8-xsd-fetch |
databases |
array | Массив баз данных |
default |
string | id базы по умолчанию |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines c3c989946b29
- 1mo ago Changed · +8 lines 8609a026aefb
- 2mo ago Changed · +2 lines 2729b8b173b8
- 2mo ago First seen · 212 lines · 46 tokens per session scan A 7237fcf1229f
db-list is a skill published in the GitHub repository Nikolay-Shirokov/cc-1c-skills (760 stars, last pushed yesterday), licensed MIT. It adds 46 tokens to every session and 2,674 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
db-list compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| db-listNikolay-Shirokov/cc-1c-skills | Skill | 760 | yesterday | MIT | A | 46 | Claude Code |
| composing-1c-queriesDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 174 | Claude Code, Codex |
| 1c-db-listDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 47 | Claude Code |
| 1c-db-updateDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 37 | Claude Code |
| 1c-query-validateDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 60 | Claude Code |
| 1c-db-createDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 32 | Claude Code |
| 1c-db-dump-xmlDesko77/claude-code-skills-1c | Skill | 90 | yesterday | MIT | A | 49 | Claude Code |