bx-charts
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill references ecosystem-standard installation commands install-bx-module and box install for the bx-charts module, which is a vendor-owned resource for the ortus-boxlang author.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for populating charts using external data sources like database queries. While this creates a potential surface for indirect prompt injection, the skill does not have capabilities to exfiltrate data or execute commands based on that input.
Audit Metadata