boxlang-docbox
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard installation and CLI commands (box install, install-bx-module) for the BoxLang and CommandBox ecosystems. These are appropriate for the tool's purpose and the developer-focused context.
- [INDIRECT_PROMPT_INJECTION]: The documentation generation process involves parsing source code comments, which is a theoretical injection surface. 1. Ingestion points: source code directories. 2. Boundary markers: not specified. 3. Capability inventory: file system read/write for doc generation. 4. Sanitization: not specified. This is the primary function of the tool and is considered safe in this context.
Audit Metadata