boxlang-runtime-github-actions
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
ortus-boxlang/setup-boxlangGitHub Action. This is a resource maintained by the official BoxLang organization and is standard for setting up the runtime environment in a CI/CD pipeline. - [CREDENTIALS_UNSAFE]: The documentation explicitly instructs users to use GitHub Secrets (
secrets.FORGEBOX_API_KEY) for managing authentication tokens rather than hardcoding them. This aligns with security best practices for secret management. - [COMMAND_EXECUTION]: The provided workflow examples contain standard CLI commands for the BoxLang environment (
boxlang,box). These are necessary for the stated purpose of running tests and managing project dependencies in a build runner.
Audit Metadata