boxlang-runtime-matchbox

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides an installation command that fetches an installation script (install.sh) from the official GitHub repository of the skill author (ortus-boxlang).
  • Evidence: curl -sSL https://raw.githubusercontent.com/ortus-boxlang/matchbox/master/install/install.sh | bash in SKILL.md.
  • [COMMAND_EXECUTION]: The skill documents several CLI commands for the matchbox tool, including installation via shell piping and various compilation flags for different targets such as native, wasm, js, and esp32.
  • Evidence: Commands like matchbox --version, matchbox --target native app.bxs, and matchbox --target esp32 --chip esp32s3 app.bxs in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:00 AM
Security Audit — agent-trust-hub — boxlang-runtime-matchbox