commandbox-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a documentation and implementation guide for CommandBox and TestBox. No malicious patterns, obfuscation, or data exfiltration attempts were detected.
- [COMMAND_EXECUTION]: The skill includes instructions for running CLI commands such as
testbox runandtestbox watch, as well as creating task runners (task.cfc). These are legitimate uses of the CommandBox environment and do not involve unsafe interpolation of untrusted data in the provided examples. - [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions from Ortus Solutions and standard community actions for CI integration. These are recognized as safe vendor-related resources.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processes that ingest test output into the agent context. While this represents a potential surface for indirect prompt injection if test suites were to contain malicious instructions, this behavior is a fundamental part of the tool's primary purpose as a test runner.
Audit Metadata