bx-jython
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill introduces the
jythonEvalandjythonEvalFilefunctions, which are designed to execute arbitrary Python code and files respectively. While this enables runtime code execution, it is the primary intended functionality of the module for the BoxLang ecosystem. - [DYNAMIC_EXECUTION]: The module enables dynamic execution of Python 2.7 logic. It uses the JSR223 engine scope to manage variable bindings between BoxLang and Python. This capability should be used cautiously when processing untrusted input to avoid code injection vulnerabilities.
- [DATA_EXPOSURE]: By default, the skill binds the entire BoxLang
variablesscope into the Python engine. Users should be aware that any sensitive data stored in this scope will be automatically accessible to scripts executed via the Jython functions.
Audit Metadata