boxlang-runtime-chromebook

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill uses curl | bash patterns to install BoxLang and the BoxLang Version Manager (BVM). These scripts are hosted on the vendor's official domain (ortussolutions.com) and are the standard installation methods for these tools.
  • [EXTERNAL_DOWNLOADS]: Downloads the Java Development Kit (JDK) from Adoptium's official GitHub releases and retrieves VS Code repository keys and packages from Microsoft's official package infrastructure.
  • [COMMAND_EXECUTION]: Employs sudo to perform system-level tasks such as updating the Debian package manager, installing essential build tools, and managing files in /opt and /etc/apt/.
  • [PERSISTENCE]: Updates the user's ~/.bashrc file to ensure JAVA_HOME and the BoxLang binary paths are correctly configured and persistent across terminal sessions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:02 AM
Security Audit — agent-trust-hub — boxlang-runtime-chromebook