1c-bitrix-cms
A set of skills and recipes so an agent writes correct, secure code for sites on 1C-Bitrix Site Manager
Install
curl -fsSL https://raw.githubusercontent.com/vrtalex/1c-bitrix-cms-skill/main/install.sh | bashmacOS and Linux. Installs into ~/.claude and Codex, flags --claude, --codex, --both.
This is third-party code. Review the repository files before installing.
What it does
An orchestrator detects the environment, filters out Bitrix24 tasks and routes work to one of ten sub-skills: setup and migrations, settings and cache, site templates, infoblocks and components, SEO, catalog and orders with 1C exchange, security, code quality, updates and REST. The skills keep the agent within platform conventions: custom code only in /local, no core changes, and D7 versus legacy API chosen per recipe. It ships CSRF, XSS and SQL injection rules, known vulnerability and compromise indicator data, and a static check-conventions script to run before handoff.
Who it is for. For PHP developers building corporate sites and online stores on 1C-Bitrix.
Good fit when
- You need an infoblock section or catalog output without core edits
- You need a form with CSRF protection and safe file uploads
- You need to check a project for convention violations and common vulnerabilities
Not a fit when
- You are working on a Bitrix24 portal rather than a site
- The site core is much older than 26.x
Example request
Build a news section on an infoblock without core edits and render it through a cached componentLimitations
Knowledge is verified on core 26.150.0, Business edition, so re-check facts on other versions. The author says key domains were tested on a live Bitrix site, while the rest relies on static analysis and docs. The PolyForm Shield 1.0.0 license forbids reselling it as a competing product. Installation runs a script from the network.
How to disable. Delete the 1c-bitrix-cms* folders from ~/.claude/skills or the Codex skills directory.
Security check
- Includes a static check script that reads project files
- Installation runs a script from the network
README in short
The README explains why the agent needs platform knowledge and lists the orchestrator and sub-skills with their domains. Installation is one command for macOS, Linux and Windows with target flags, with details in INSTALL.md. It includes sample prompts, sections on security and honest test coverage, system requirements and vendor doc links. PolyForm Shield 1.0.0 licensed.
SKILL.md
--- name: 1c-bitrix-cms description: "Создание и доработка сайтов на «1С-Битрикс: Управление сайтом» (корпоративные сайты и интернет-магазины, ядро 26.x) — инфоблоки, компоненты, шаблоны, SEO, магазин, установка/миграции/бэкап, обновления, безопасность, качество. Используй, когда пользователь работает с сайтом на 1С-Битрикс / Bitrix (не с порталом Битрикс24)." --- # 1c-bitrix-cms — оркестратор Точка входа для работы с сайтами на «1С-Битрикс: Управление сайтом». Определи среду, объяви гейты, направь к нужному под-скиллу и подгрузи только релевантный срез базы знаний. > Знания актуальны для ядра 26.x (выверено на 26.150.0); на более новых ядрах перепроверяйте версионно-зависимые факты. ## Карта решений Общий поток: отсеки чужую платформу → определи среду → держи гейты → маршрутизируй по намерению → подгрузи только нужный срез базы знаний.
FAQ
Does it work for Bitrix24?
No, it targets Site Manager. The orchestrator rejects Bitrix24 portal tasks.
Can I choose the install target?
Yes, the installer accepts --claude, --codex or --both, plus --version, --local, --check and --dry-run.
Related
Official skills and agents from the .NET team: performance, MSBuild, NuGet, upgrades, testing, ASP.NET Core, Blazor and MAUI
Laravel's official MCP server, guidelines and skills: the agent sees the DB schema, logs and package versions and searches ecosystem docs
The official FastAPI skill, bundled with the package, teaching agents to write code for the installed version
Firebase MCP Server
Firebase CLI and MCP Server
Official Firebase MCP server from the Firebase CLI: projects, Firestore, Auth, Crashlytics, Remote Config and function logs