boxlang-runtime-chromebook
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches OpenJDK binaries from the Adoptium project's official GitHub repository.
- [EXTERNAL_DOWNLOADS]: Downloads VS Code binaries from Microsoft's official package repositories.
- [REMOTE_CODE_EXECUTION]: Downloads and executes installation scripts directly from the vendor's domain (downloads.ortussolutions.com) using the curl-to-bash pattern for runtime and version manager setup.
- [COMMAND_EXECUTION]: Utilizes standard Linux commands such as apt, tar, and cat for package management and local script creation.
- [PRIVILEGE_ESCALATION]: Requires administrative privileges via sudo to install system packages and configure tools in the /opt directory.
- [PERSISTENCE]: Modifies the user's .bashrc profile to persist JAVA_HOME and PATH environment variables across shell sessions.
Audit Metadata