boxlang-runtime-jsr-223
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Maven and Gradle dependencies from 'io.boxlang', which is the official group for the BoxLang vendor.
- [COMMAND_EXECUTION]: The documentation mentions the 'box' CLI for installing runtime modules, which is a standard administrative tool for managing the BoxLang ecosystem.
- [REMOTE_CODE_EXECUTION]: While the skill explains how to use 'engine.eval()' to execute scripts, this is the fundamental purpose of a JSR-223 implementation. The instructions include a 'Production Checklist' that explicitly warns developers to only load scripts from trusted sources and to maintain fresh 'Bindings' to prevent data leakage between sessions.
- [SAFE]: No malicious patterns such as prompt injection, unauthorized data access, or obfuscation were detected in the content.
Audit Metadata