FunnelSlayer
Book a call

Bitrix Security

Published by azimuth0x28 in bitrix-skills-hub

No known issues1 installs

What this skill does

Use when handling untrusted input, sanitizing output, or auditing a codebase for vulnerabilities. Covers Bitrix security — CSRF, XSS/HTML sanitization, SQL injection, SSRF, JWT/JWK, access rights, #[ActionAccess]/AccessCheckControllerInterface, secure cookies, value encryption. Key terms — CSRF, XSS, SQLi, SSRF, JWT, ActionAccess, AccessCheckControllerInterface.

Add Bitrix Security to your agent

Review the source and files first. When you are ready, copy the prompt instruction or use the CLI command supported by your environment.

Install with a prompt

Paste this into a compatible coding agent:

add this skill "bitrix-security" from https://github.com/azimuth0x28/bitrix-skills-hub

Install with the CLI

Run this command in a controlled environment after reviewing the repository:

npx skills add https://github.com/azimuth0x28/bitrix-skills-hub --skill bitrix-security

Skill instructions

Security in Bitrix

Baseline: main 23.0+. Features newer than baseline are marked Since.

Progressive disclosure: open only the rule files that match the task. Do not read every rules/*.md.

How to use

  1. Identify the layer the task touches.
  2. Open the matching rules/*.md below.
  3. Prefer framework-native Bitrix patterns over custom abstractions.

Choose a rule file

When to read rules/csrf-xss.md

Read rules/csrf-xss.md (CSRF and XSS) when the task involves:

  • CSRF
  • XSS and HTML Sanitization
  • CSRF Details

When to read rules/sql-ssrf.md

Read rules/sql-ssrf.md (SQL injection and SSRF) when the task involves:

  • SSRF
  • SQL Injections

When to read rules/jwt-crypto-access.md

Read rules/jwt-crypto-access.md (JWT, crypto, access, cookies) when the task involves:

  • JWT / JWK
  • Access Rights
  • #[ActionAccess] / AccessCheckControllerInterface
  • Secure Cookies
  • Value Encryption
  • Miscellaneous
  • Checklist

Checklist

  • Opened only the rule file(s) needed for this task.
  • Followed DI / /local/ / security canons from AGENTS.md.

Files included

  • rules/csrf-xss.md
  • rules/jwt-crypto-access.md
  • rules/sql-ssrf.md
  • SKILL.md

More skills

Bitrix Security: Install, Source and Security | FunnelSlayer