bx-yaml
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill documents standard YAML processing BIFs (Built-In Functions) for the BoxLang environment. It explicitly highlights security best practices, such as using the
yamlExcludeannotation to prevent sensitive information like passwords or tokens from being serialized into output files.- [INDIRECT_PROMPT_INJECTION]: The skill documents ingestion points for untrusted data viayamlDeserializeandyamlDeserializeFileinSKILL.md. No specific boundary markers or input sanitization examples are provided for the deserialization process, which is a standard attack surface for data-parsing utilities. The skill's capabilities include file-writing throughyamlSerializewhen a filepath is provided.- [COMMAND_EXECUTION]: The installation section references standard package management commands (install-bx-module,box install) for the BoxLang ecosystem, which are expected for the installation of the documented module.
Audit Metadata