boxlang-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a configuration guide for the BoxLang runtime, providing structured JSON and BoxLang code templates for settings such as datasources, caches, and executors.
- [SAFE]: It explicitly encourages the use of environment variable substitution (e.g.,
${env.DB_PASSWORD}) to handle sensitive credentials, which is a standard security best practice to prevent secret exposure in version-controlled configuration files. - [SAFE]: The skill includes documentation for the
securitydirective, which enables developers to whitelist file extensions and block specific Java imports or built-in functions (BIFs), enhancing the runtime's security posture. - [SAFE]: All resource references and tool names mentioned are consistent with the identified vendor (ortus-boxlang) and the stated purpose of the skill.
Audit Metadata