skills/ortus-boxlang/skills/bx-jython/Gen Agent Trust Hub

bx-jython

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill introduces the jythonEval and jythonEvalFile functions, which are designed to execute arbitrary Python code and files respectively. While this enables runtime code execution, it is the primary intended functionality of the module for the BoxLang ecosystem.
  • [DYNAMIC_EXECUTION]: The module enables dynamic execution of Python 2.7 logic. It uses the JSR223 engine scope to manage variable bindings between BoxLang and Python. This capability should be used cautiously when processing untrusted input to avoid code injection vulnerabilities.
  • [DATA_EXPOSURE]: By default, the skill binds the entire BoxLang variables scope into the Python engine. Users should be aware that any sensitive data stored in this scope will be automatically accessible to scripts executed via the Jython functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 02:44 PM