steelmorgan/no-direct-db-access
framework_eng/rules/no-direct-db-access/SKILL.md
Read/write data through the 1C platform, not the DBMS
$ install --global
skillsauthnpx skillsauth add steelmorgan/1c-agent-based-dev-framework no-direct-db-accessInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 30, 2026, 5:41 AM137.6s1 file scanned
SKILL.md
- name:
- no-direct-db-access
- description:
- Read/write data through the 1C platform, not the DBMS
- alwaysApply:
- true
Prohibition of Direct DBMS Access
Global rule for all agents and subagents.
Context
The 1C:Enterprise platform is the only legitimate data access layer. Direct access to the DBMS (PostgreSQL, MS SQL, etc.) bypasses business logic, violates data integrity, and creates security risks.
Rules
PROHIBITED (without exceptions)
- Direct modification of data in the DBMS:
INSERT,UPDATE,DELETE,TRUNCATE, DDL operations - Generating or suggesting SQL scripts for data changes
- Bypassing platform mechanisms (RLS, locks, subscriptions) through direct access
PROHIBITED (without user approval)
- Reading data from the DBMS directly (
SELECT) — only through 1C platform queries - Connecting to the DBMS by any means (psql, sqlcmd, ODBC, etc.)
PERMITTED (performance tasks only)
With explicit user approval or if the task is classified as a performance task:
SELECTqueries to the DBMS for analyzing execution plans (EXPLAIN ANALYZE)- Reading DBMS system views (
pg_stat_*,sys.dm_exec_*) - Analyzing locks, statistics, and indexes through system views
Even in these cases — read only, no changes.
Behavior on Violation
- DO NOT execute a query against the DBMS
- Record the attempt in
{role}-context.md - Suggest a platform alternative (1C query, BСП mechanism, etc.)
- If a platform alternative is impossible —
clarification_needed→ user
depends_on: []
Related Skills
steelmorgan/onec-server-maintenance-hooks
development
VerifiedTrustedCommunity
1C server maintenance webhooks: container restart and external component cache cleanup
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/dap-bsl-code-debug-procedure
development
VerifiedTrustedCommunity
Interactive DAP debugging of a single BSL procedure
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/rlm-bsl-search
tools
VerifiedTrustedCommunity
Rules for using RLM tools for project search and navigation in 1C/BSL
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/winow
development
VerifiedTrustedCommunity
Creates web applications and routes on Winow (a web server on OneScript and Autumn). Use when working with a web server on OneScript, routing, or Winow controllers.
83SKILL.mdUpdated Jul 4, 2026