boxlang-zip

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The 'Encryption' section contains a hardcoded password string (SecurePassword123) within the code examples for creating and extracting ZIP archives. While intended as a demonstration, the use of literal secrets in code snippets can lead to accidental exposure if copied into production environments. \n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates functions for archive extraction and entry reading, creating an attack surface for processing untrusted data. \n
  • Ingestion points: ZIP file contents and metadata are ingested using the bx:zip component in SKILL.md. \n
  • Boundary markers: There are no markers or instructions within the examples to ignore or delimit potentially malicious content embedded in ZIP entry paths or data. \n
  • Capability inventory: The skill includes examples for writing to the file system (unzip), reading files (read), and deleting files (delete). \n
  • Sanitization: The provided code examples do not include validation or sanitization of entry paths, which is necessary to prevent path traversal (Zip Slip) attacks when extracting archives from untrusted sources.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 09:01 AM
Security Audit — agent-trust-hub — boxlang-zip