bx-sites-ai-features
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install extension packs from the author's official GitHub repository (
ortus-boxlang/bx-sites-skills) and the BoxLang Skills Directory (skills.boxlang.io). These are legitimate vendor resources used for their intended purpose. - [COMMAND_EXECUTION]: The documentation includes standard shell commands for managing skills using common tools like
npxand the ColdBox CLI. These commands are typical for the Agent Skills ecosystem and are directed at trusted sources. - [SAFE]: The Model Context Protocol (MCP) feature described generates structured JSON indices of a site's content. While this creates a complete machine-readable copy of the site, it is the primary stated purpose of the skill and is intended for public, read-only search and retrieval by AI agents.
Audit Metadata