boxlang-runtime-miniserver
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the legitimate usage of the
boxlang-miniservercommand-line tool. It includes standard server configuration options like port binding, webroot specification, and health check endpoints. - [SAFE]: Guidance regarding sensitive information is security-positive; it explicitly mentions that
.envfiles are blocked from HTTP access and that health check endpoints do not expose environment variables. - [SAFE]: No suspicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected. The usage of
.envfiles for configuration is consistent with industry-standard secret management practices.
Audit Metadata