boxlang-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a purely informational documentation resource intended to guide the agent in writing and reviewing BoxLang code.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes security by advising developers to use environment variables (
${env.VAR_NAME}) for secrets rather than storing them in code, which is a standard security best practice. - [COMMAND_EXECUTION]: While the skill mentions BoxLang tags like
bx:abortand Java integration, these are documented within the context of language syntax guidelines and do not constitute malicious command execution or unauthorized system access. - [PROMPT_INJECTION]: No attempts to override agent safety guidelines, bypass filters, or extract system prompts were detected in the instructions.
Audit Metadata