boxlang-runtime-desktop-electron
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents a workflow for downloading and executing the BoxLang MiniServer runtime (e.g., via
npm run package:miniserver). This is a core part of the application's runtime provisioning.- [DYNAMIC_EXECUTION]: The architecture depends on spawning the MiniServer as a child process within the Electron environment. The skill provides instructions for lifecycle management (start/stop/restart) and setting executable permissions on binaries.- [PRIVILEGE_ESCALATION]: To facilitate the use of unsigned builds, the packaging configuration includes helper scripts likewin-unblock.ps1andmac-open.shto assist users in bypassing operating system security warnings for unverified software.
Audit Metadata