skills/ortus-boxlang/skills/bx-yaml/Gen Agent Trust Hub

bx-yaml

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill documents standard YAML processing BIFs (Built-In Functions) for the BoxLang environment. It explicitly highlights security best practices, such as using the yamlExclude annotation to prevent sensitive information like passwords or tokens from being serialized into output files.- [INDIRECT_PROMPT_INJECTION]: The skill documents ingestion points for untrusted data via yamlDeserialize and yamlDeserializeFile in SKILL.md. No specific boundary markers or input sanitization examples are provided for the deserialization process, which is a standard attack surface for data-parsing utilities. The skill's capabilities include file-writing through yamlSerialize when a filepath is provided.- [COMMAND_EXECUTION]: The installation section references standard package management commands (install-bx-module, box install) for the BoxLang ecosystem, which are expected for the installation of the documented module.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:50 PM