commandbox-embedded-server
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the CommandBox CLI to manage server processes and configuration.
- [PERSISTENCE]: Includes the
--serviceInstallcommand to set up the server as a background OS service. - [DYNAMIC_EXECUTION]: Documents the use of lifecycle scripts in
server.jsonto execute commands on server events. - [EXTERNAL_DOWNLOADS]: Mentions installing the
commandbox-acmemodule and Java runtimes from within the CLI. - [CREDENTIALS_UNSAFE]: Uses dummy passwords in configuration examples for Basic Authentication documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with server configuration data. 1. Ingestion points:
server.jsonand webroot files. 2. Boundary markers: None present. 3. Capability inventory: Command execution, file system access, and network binding. 4. Sanitization: None mentioned for processing configuration values.
Audit Metadata