boxlang-runtime-wasm-container
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download installation scripts for WebAssembly runtimes from official sources.
- Fetches the Wasmtime installation script from its official project domain (wasmtime.dev).
- Fetches the WasmEdge installation script from its official repository on GitHub.
- [REMOTE_CODE_EXECUTION]: Includes patterns for executing the downloaded installation scripts via the shell. These are documented steps for setting up standard developer tooling for WASM environments.
- [COMMAND_EXECUTION]: Provides instructions for using local command-line tools like MatchBox, Docker, Wasmtime, and WasmEdge to compile and run applications. These commands are integral to the skill's stated purpose of WASM development.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing and compilation of BoxLang source code (.bxs files).
- Ingestion points: BoxLang source files (e.g.,
my_service.bxs) are used as input for thematchboxcompiler (in SKILL.md). - Boundary markers: None explicitly defined in the instructional text.
- Capability inventory: Execution of shell commands for compilation, container builds, and running WASM binaries with granted capabilities (in SKILL.md).
- Sanitization: Not applicable as the skill provides a workflow for developers to manage their own source code.
Audit Metadata