boxlang-file-watchers
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill documents standard filesystem monitoring features of the BoxLang runtime, such as the watcher service and related BIFs (watcherNew, watcherStart). All examples use vendor-consistent resource patterns and local path placeholders.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an ingestion surface for external data via filesystem events. 1. Ingestion points: Monitoring of filesystem events (created, modified, deleted) as defined in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Filesystem monitoring and event-driven execution via listeners. 4. Sanitization: Absent. This monitoring is a standard architectural feature and no specific exploitation logic is provided.
- [DYNAMIC_EXECUTION]: The documentation demonstrates the ability to load listeners via class name strings (e.g., 'app.listeners.ImportWatcher'). This is a standard dynamic loading feature of the BoxLang language for extensibility and is not indicative of malicious intent in this context.
Audit Metadata