boxlang-core-dev-module-development
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches project templates and runtime dependencies from official vendor repositories on GitHub and Ortus Solutions' infrastructure. These are recognized as trusted resources for this skill.
- [COMMAND_EXECUTION]: Instructions include the use of standard development tools such as the Gradle wrapper and the Box CLI for compiling, testing, and publishing modules.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a data ingestion surface where user configuration from
boxlang.jsonis mapped to the internalsettingsstruct. Evidence includes the ingestion point (external configuration file), a capability inventory consisting of module lifecycle methods and BIFs, and the presence of sanitization/validation patterns within theconfigure()lifecycle method. No specific boundary markers are required for this local configuration pattern.
Audit Metadata