bx-markdown
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
bx-markdownmodule usinginstall-bx-moduleandbox install. These are standard package management commands within the BoxLang ecosystem for installing vendor-supported modules. - [INDIRECT_PROMPT_INJECTION]: The skill defines functions (
markdown()andHtmlToMarkdown()) that ingest and process external, potentially untrusted text data. This creates a surface for indirect prompt injection or XSS if the output is rendered without sanitization. However, the documentation follows best practices by explicitly warning users to sanitize the resulting HTML and recommending the use ofbx-jsoupfor protection.
Audit Metadata