boxlang-zip
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The 'Encryption' section contains a hardcoded password string (
SecurePassword123) within the code examples for creating and extracting ZIP archives. While intended as a demonstration, the use of literal secrets in code snippets can lead to accidental exposure if copied into production environments. \n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates functions for archive extraction and entry reading, creating an attack surface for processing untrusted data. \n - Ingestion points: ZIP file contents and metadata are ingested using the
bx:zipcomponent inSKILL.md. \n - Boundary markers: There are no markers or instructions within the examples to ignore or delimit potentially malicious content embedded in ZIP entry paths or data. \n
- Capability inventory: The skill includes examples for writing to the file system (
unzip), reading files (read), and deleting files (delete). \n - Sanitization: The provided code examples do not include validation or sanitization of entry paths, which is necessary to prevent path traversal (Zip Slip) attacks when extracting archives from untrusted sources.
Audit Metadata