boxlang-runtime-commandbox
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to download and pipe a shell script directly to
bashfor installation (curl -fsSl https://downloads.ortussolutions.com/commandbox-cli-install | bash). This script originates from the vendor's official download domain. - [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and GPG keys from
downloads.ortussolutions.com, which is the official infrastructure for the skill's authoring organization. - [PRIVILEGE_ESCALATION]: The skill includes instructions to use
sudofor administrative tasks such as adding repository keys (sudo apt-key add) and installing system packages (sudo apt-get install commandbox).
Audit Metadata