boxlang-runtime-google-cloud-functions

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references a starter project template from the vendor's official GitHub repository (github.com/ortus-boxlang/boxlang-starter-google-functions.git) for project initialization.
  • [COMMAND_EXECUTION]: Provides instructions for using standard development tools, including Gradle (./gradlew) for build automation and the Google Cloud CLI (gcloud) for cloud deployment.
  • [INDIRECT_PROMPT_INJECTION]: The runtime environment ingests untrusted HTTP request data via an event struct (ingestion points in SKILL.md), lacks explicit boundary markers, and possesses capabilities for compiled script execution, with sanitization responsibility remaining with the application developer.
  • [DYNAMIC_EXECUTION]: The system implements dynamic route resolution by mapping URI segments to PascalCase handler files and supports header-based routing via the x-bx-function header for method dispatch.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:47 PM