skills/ortus-boxlang/skills/bx-jdbc/Gen Agent Trust Hub

bx-jdbc

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for installing BoxLang modules using standard CLI tools (install-bx-module and box install). These commands are used to install vendor-specific JDBC driver modules (e.g., bx-postgresql, bx-mysql) which are consistent with the skill's stated purpose and the author's identity.
  • [DATA_EXPOSURE]: The skill includes configuration examples for database connections. It explicitly warns against hardcoding credentials and provides examples of using environment variables (server.system.environment.DB_PASS) to handle sensitive information securely.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to perform database queries using queryExecute. It correctly shows the use of parameterized queries (e.g., :active, :since) to safely handle data and mitigate SQL injection risks.
  • [SAFE]: All components, including the module naming conventions and the recommended configuration patterns, represent standard development workflows for the BoxLang ecosystem with no malicious patterns detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:46 PM