bx-jdbc
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing BoxLang modules using standard CLI tools (
install-bx-moduleandbox install). These commands are used to install vendor-specific JDBC driver modules (e.g.,bx-postgresql,bx-mysql) which are consistent with the skill's stated purpose and the author's identity. - [DATA_EXPOSURE]: The skill includes configuration examples for database connections. It explicitly warns against hardcoding credentials and provides examples of using environment variables (
server.system.environment.DB_PASS) to handle sensitive information securely. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to perform database queries using
queryExecute. It correctly shows the use of parameterized queries (e.g.,:active,:since) to safely handle data and mitigate SQL injection risks. - [SAFE]: All components, including the module naming conventions and the recommended configuration patterns, represent standard development workflows for the BoxLang ecosystem with no malicious patterns detected.
Audit Metadata