bx-sites-themes
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
bxSitescommand-line interface to manage themes, including commands for installation (install:theme), creation (theme:new), and importing from other generators (theme:import). - [EXTERNAL_DOWNLOADS]: The documentation references downloading themes from ForgeBox, the official package registry for the vendor, and identifies the use of external CDNs (such as jsDelivr and Tailwind) for specific web assets.
- [INDIRECT_PROMPT_INJECTION]: The theme engine architecture processes markdown content to generate HTML, which is a common surface where embedded instructions in content files could potentially influence an agent reading the output.
- Ingestion points: Markdown content from the project's documentation files is processed and rendered via the
variables.page.contentHtmlvariable. - Boundary markers: Content is structured within standard HTML semantic tags like
<article>and<main>. - Capability inventory: The templates use BoxLang (
.bxm), allowing for dynamic content rendering and layout control. - Sanitization: The skill emphasizes the use of
encodeForHTML()for metadata and navigation elements to prevent cross-site scripting (XSS) or injection at the template level.
Audit Metadata