boxlang-runtime-matchbox
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command that fetches an installation script (
install.sh) from the official GitHub repository of the skill author (ortus-boxlang). - Evidence:
curl -sSL https://raw.githubusercontent.com/ortus-boxlang/matchbox/master/install/install.sh | bashinSKILL.md. - [COMMAND_EXECUTION]: The skill documents several CLI commands for the
matchboxtool, including installation via shell piping and various compilation flags for different targets such asnative,wasm,js, andesp32. - Evidence: Commands like
matchbox --version,matchbox --target native app.bxs, andmatchbox --target esp32 --chip esp32s3 app.bxsinSKILL.md.
Audit Metadata