boxlang-runtime-aws-lambda

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references a project starter repository on GitHub (github.com/ortus-boxlang/boxlang-starter-aws-lambda) and documentation for the AWS SAM CLI. These are vendor-owned resources and well-known service documentation used for project initialization.
  • [COMMAND_EXECUTION]: The instructions include standard build and deployment commands using gradlew, sam, and aws CLI. It also provides guidance on executing local deployment scripts (./workbench/deploy.sh) which is consistent with its stated purpose of assisting in serverless application management.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a handler structure that ingests an event object from AWS Lambda. While this is a surface for untrusted data ingestion, it is a fundamental part of the AWS Lambda programming model. The skill encourages secure development practices by advising the use of environment variables and AWS Secrets Manager for handling sensitive configuration.
  • Ingestion points: The event parameter within the run method in Lambda.bx.
  • Boundary markers: None present in the basic templates provided.
  • Capability inventory: The skill utilizes build, test, and deployment capabilities through Gradle and the AWS SAM CLI.
  • Sanitization: Not explicitly shown in the code examples, but the documentation points toward using managed AWS services for secure data handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:46 PM