bx-password-encrypt
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides instructions for secure password hashing and verification using industry-standard algorithms including BCrypt, Argon2, SCrypt, and PBKDF2.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
bx-password-encryptmodule via the CommandBox (box) CLI. This is a standard installation procedure for a vendor-provided module from the skill author (Ortus BoxLang). - [SAFE]: The documentation actively promotes security best practices, such as warning against the use of weak hashes like MD5 or SHA-1, recommending timing-safe verification, and using auto-generated salts.
Audit Metadata