boxlang-runtime-aws-lambda
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a project starter repository on GitHub (
github.com/ortus-boxlang/boxlang-starter-aws-lambda) and documentation for the AWS SAM CLI. These are vendor-owned resources and well-known service documentation used for project initialization. - [COMMAND_EXECUTION]: The instructions include standard build and deployment commands using
gradlew,sam, andawsCLI. It also provides guidance on executing local deployment scripts (./workbench/deploy.sh) which is consistent with its stated purpose of assisting in serverless application management. - [INDIRECT_PROMPT_INJECTION]: The skill defines a handler structure that ingests an
eventobject from AWS Lambda. While this is a surface for untrusted data ingestion, it is a fundamental part of the AWS Lambda programming model. The skill encourages secure development practices by advising the use of environment variables and AWS Secrets Manager for handling sensitive configuration. - Ingestion points: The
eventparameter within therunmethod inLambda.bx. - Boundary markers: None present in the basic templates provided.
- Capability inventory: The skill utilizes build, test, and deployment capabilities through Gradle and the AWS SAM CLI.
- Sanitization: Not explicitly shown in the code examples, but the documentation points toward using managed AWS services for secure data handling.
Audit Metadata