boxlang-database-access
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a security-conscious guide, explicitly teaching the prevention of SQL injection through mandatory parameterization and providing clear examples of safe vs. unsafe (interpolated) query patterns.
- [SAFE]: Credential management follows industry best practices by utilizing environment variable placeholders (e.g.,
${DB_PASS}) and system environment lookups rather than hardcoding sensitive data. - [SAFE]: All external references are directed toward official BoxLang documentation at ortusbooks.com (a vendor-controlled domain) or established security resources like OWASP.
- [SAFE]: No suspicious behavior such as obfuscation, privilege escalation, or unauthorized network exfiltration was identified. The skill's primary focus is on standard database operations and security best practices.
Audit Metadata