bx-sites-variables-functions
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documents the use of BoxLang scripts (e.g.,
functions.bxs) and theme templates (.bxmfiles) that are executed during the site building process. These 'magic functions' allow for dynamic logic and HTML generation to be spliced into Markdown content before final conversion. - [INDIRECT_PROMPT_INJECTION]: The skill describes a templating mechanism using
{{ }}to interpolate variables from configuration files (bxsites.yaml) and the results of function calls into the Markdown body. This represents a data ingestion surface where content from various sources is processed by the agent; the documentation provides examples of usingencodeForHTMLto handle data safely.
Audit Metadata