boxlang-zip
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling ZIP archives, which involves processing potentially untrusted data from external sources. The documentation includes a 'Best Practices' section that recommends path validation and error handling to mitigate risks.
- [CREDENTIALS_UNSAFE]: Demonstration code for encryption features uses a placeholder password ('SecurePassword123'). The skill addresses this potential risk by explicitly instructing users to store credentials in environment variables rather than hardcoding them.
- [COMMAND_EXECUTION]: The skill describes standard file system operations for archive management, including creation, listing, and extraction using native BoxLang components.
Audit Metadata