Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Skills (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
AI agent skills for BoxLang — a Modern Dynamic JVM Language built on JRE 21+.
This repository provides reusable AI skills for BoxLang development, compatible with any agent that supports the skills.sh open standard — including Claude Code, Cursor, Copilot, and more.
Skills inject BoxLang domain knowledge directly into your AI agent so it can write accurate, idiomatic BoxLang code for you.
You can find all our skills published to our online directory at https://skills.boxlang.io/.
Skills are Markdown files (SKILL.md) that give your AI agent expert-level context on a specific topic. They are discovered and loaded automatically by the agent when relevant — a query about async programming loads the async skill, a question about deployment loads the deployment skill, and so on.
Each skill in this repo contains:
Skill identifiers now use the boxlang-dev-* naming convention for easier discovery in installed skill lists.
Requires Node.js — no installation needed, just npx:
# Install ALL BoxLang skills (all categories)
npx skills add ortus-boxlang/skillsThat's it. Your AI agent now has BoxLang and CommandBox expertise.
Install this repository as a Claude plugin:
claude plugin install https://github.com/ortus-boxlang/skillsIf you use plugin marketplace commands:
/plugin marketplace add ortus-boxlang/skills
/plugin install boxlang-agent-skills@ortus-boxlang# Install the ColdBox CLI if you haven't already
box install coldbox-cli
# Install AI integration into your app
# This reads your app, box.json and installs skills based on your stack and preferences
coldbox ai install
# Skills Management
# List installed skills
coldbox ai skills list
# Add a skill
coldbox ai skills add Ortus-Solutions/skills/vuejs-expert
# Remove a skill
coldbox ai skills remove vuejs-expertAll skills are installed at .agents/skills/ in your project.
boxlang-developer — Building Applications with BoxLangFor developers writing BoxLang applications: web apps, APIs, database access, async pipelines, caching, Java interop, module usage, and deployment.
npx skills add ortus-boxlang/skills/boxlang-developer| Skill | What It Covers |
|---|---|
boxlang-dev-application-descriptor | Application.bx discovery, multi-app isolation, lifecycle callbacks, app-level this.* settings, and app-scoped this.schedulers/this.watchers wiring |
boxlang-dev-boxlang-async-programming | BoxFuture, futureNew, asyncRun, asyncAll, asyncAny, asyncAllApply, executors (io-tasks/cpu-tasks/scheduled-tasks), schedulers, thread component, bx:lock |
boxlang-dev-boxlang-file-watchers | Filesystem watcher lifecycle (watcherNew/watcherStart/watcherStop), listener strategies (closure/struct/class), event payload handling, debounce/throttle tuning, and watcher stats |
boxlang-dev-boxlang-best-practices | Naming conventions, scoping, function structure, error handling, performance, and maintainability guidelines |
boxlang-dev-boxlang-caching | Cache providers, named regions, cachePut/cacheGet, output caching, Redis, Couchbase, TTL policies, distributed locking |
boxlang-dev-boxlang-cfml-migration | Key syntax and behavioral differences, bx-compat-cfml module, converting file types, fixing common migration issues |
boxlang-dev-boxlang-classes-and-oop | Classes, inheritance, interfaces, abstract classes, properties, constructors, static members, annotations, final constructs, method chaining |
boxlang-dev-boxlang-code-documenter | Javadoc-style function/class comments, argument and return-type docs, DocBox-compatible annotations |
boxlang-dev-boxlang-code-reviewer | Code quality, correctness, security vulnerabilities, performance, style — structured review feedback |
boxlang-dev-boxlang-configuration | boxlang.json runtime settings, datasources, caches, executors, modules, logging, security, schedulers |
boxlang-dev-boxlang-database-access | queryExecute, bx:query, datasource config, parameterized queries, transactions, stored procedures, SQL injection prevention |
boxlang-dev-boxlang-deployment | CommandBox, Docker, AWS Lambda, GitHub Actions CI/CD, BVM, boxlang.json runtime config, environment variable overrides |
boxlang-dev-boxlang-docbox | API documentation generation: CLI, HTML/JSON/UML/CommandBox strategies, themes, multiple sources, custom strategies |
boxlang-dev-boxlang-file-handling | fileRead/fileWrite/fileCopy/fileMove, directory operations, streaming large files, file uploads, CSV/JSON from disk |
boxlang-dev-boxlang-functional-programming | Closures (=>) vs lambdas (->), higher-order functions, map/filter/reduce/flatMap/groupBy, destructuring, spread |
boxlang-dev-boxlang-interceptors | Interceptor/event system, announce()/announceAsync(), pre/post hooks, security guards, BoxRegisterInterceptor() |
boxlang-dev-boxlang-java-integration | createObject, static method calls, type conversion, closures as functional interfaces, JARs, JSR-223 scripting |
boxlang-dev-boxlang-language-fundamentals | File types (.bx/.bxs/.bxm), variables, scopes, operators, control flow, exception handling, type system, destructuring, spread |
boxlang-dev-boxlang-modules-and-packages | box install, module config, BoxLang+ premium modules (bx-pdf, bx-redis, bx-csv, bx-spreadsheet), ORM, mail |
boxlang-dev-boxlang-scheduled-tasks | Scheduler DSL (BaseScheduler/ScheduledTask), scheduler lifecycle BIFs, cron/frequency APIs, task grouping, timezone handling, and bx:schedule HTTP-driven tasks |
boxlang-dev-runtime-* | Runtime/deployment targets are individual skills under boxlang-developer such as boxlang-dev-runtime-miniserver, boxlang-dev-runtime-commandbox, boxlang-dev-runtime-docker, boxlang-dev-runtime-aws-lambda, and more |
boxlang-dev-boxlang-security | OWASP Top 10, injection prevention, file upload safety, secret management, secure coding patterns |
boxlang-dev-boxlang-templating | .bxm markup files, output expressions, bx:output/bx:loop/bx:if/bx:include/bx:script, building views |
boxlang-dev-boxlang-testing | TestBox BDD (describe/it), xUnit, expectations, $assert, life-cycle hooks, MockBox, mock data, async/exception testing |
boxlang-dev-boxlang-web-development | Application.bx lifecycle, request/response, sessions, forms, REST APIs, HTTP client, CSRF, Server-Sent Events, MiniServer config |
boxlang-dev-boxlang-zip | bx:zip component: creating/extracting/listing/modifying archives, compression levels, encryption, backup workflows |
boxlang-core-development — Extending the BoxLang RuntimeFor developers building BoxLang modules, contributing to the core runtime, and creating custom built-in functions, interceptors, and components.
npx skills add ortus-boxlang/skills/boxlang-core-development| Skill | What It Covers |
|---|---|
boxlang-dev-boxlang-async-tasks | BoxFuture, AsyncService, executor types, BaseScheduler, ScheduledTask fluent API, cron constraints, task lifecycle callbacks, registering schedulers via ModuleConfig.bx |
boxlang-dev-boxlang-bif-development | @BoxBIF annotation, invoke() method, argument typing, @BoxMember for member functions, Java BIF classes, runtime service access |
boxlang-dev-boxlang-component-development | Custom tags/components, onStartTag/onEndTag, body content, attribute declarations, registering component paths in modules |
boxlang-dev-boxlang-interceptors | Observer/Intercepting Filter patterns, 3 interceptor pools, BoxLang/Java/lambda interceptors, registration, interception points, custom events |
boxlang-dev-boxlang-logging | LoggingService, BoxLangLogger (trace/debug/info/warn/error), pre-configured loggers, named loggers, parameterized messages, boxlang.json logging config |
boxlang-dev-boxlang-module-development | ModuleConfig.bx lifecycle (configure/onLoad/onUnload), settings, Gradle build, ForgeBox publishing |
boxlang-dev-boxlang-runtime-architecture | BoxRuntime services, IBoxContext hierarchy, scope chain, DynamicObject, type system, parsing pipeline (source → AST → bytecode), virtual threads |
commandbox — CommandBox CLI, Package Manager & Embedded ServerFor developers using CommandBox — the CFML/BoxLang CLI, package manager, and embedded Undertow server from Ortus Solutions.
npx skills add ortus-boxlang/skills/commandbox| Skill | What It Covers |
|---|---|
boxlang-dev-commandbox-setup | Installation (macOS/Linux/Windows/Homebrew), upgrading, Java configuration, commandbox.properties, light vs thin binaries |
boxlang-dev-commandbox-usage | CLI commands, named/positional parameters, flags, system settings (${VAR:default}), env vars, backtick expressions, piping, recipes, REPL, aliases, exit codes, watch |
boxlang-dev-commandbox-package-management | box.json schema, ForgeBox / Git / HTTP / folder / S3 / Gist / Java endpoints, semver ranges, dependencies vs devDependencies, lock files, package scripts, artifacts cache, publishing |
boxlang-dev-commandbox-embedded-server | Undertow server configuration via server.json, server profiles, JVM/heap settings, SSL/TLS, URL rewrites, server rules, multi-site support, basic auth, aliases, OS service, server scripts |
boxlang-dev-commandbox-task-runners | Task CFC anatomy, lifecycle events, interactive jobs DSL, progress bars, ANSI print helpers, threading/async, file watching, running sub-commands, property files, ad-hoc JARs/modules |
boxlang-dev-commandbox-developing | Custom commands, namespace conventions, parameter annotations, WireBox DI, module structure, ModuleConfig.cfc, interceptors, core interception points, injection DSL, sharing/publishing |
boxlang-dev-commandbox-config-settings | Global config management, config set/show/clear, server defaults, ForgeBox API token, custom endpoints, proxy settings, env var overrides (box_config_*), setting sync |
boxlang-dev-commandbox-deploying | Production server.json, Docker (ortussolutions/commandbox), GitHub Actions (setup-commandbox), Heroku/Dokku buildpack, Amazon Lightsail/VPS, systemd service, CFConfig integration |
boxlang-dev-commandbox-testing | testbox run flags, box.json testbox config, test watcher, CI integration, output formats, code coverage, TestBox CLI patterns |
# Single skill from boxlang-developer
npx skills add ortus-boxlang/skills/boxlang-developer/language-fundamentals
npx skills add ortus-boxlang/skills/boxlang-developer/application-descriptor
npx skills add ortus-boxlang/skills/boxlang-developer/async-programming
npx skills add ortus-boxlang/skills/boxlang-developer/file-watchers
npx skills add ortus-boxlang/skills/boxlang-developer/scheduled-tasks
npx skills add ortus-boxlang/skills/boxlang-developer/web-development
npx skills add ortus-boxlang/skills/boxlang-developer/database-access
npx skills add ortus-boxlang/skills/boxlang-developer/caching
npx skills add ortus-boxlang/skills/boxlang-developer/java-integration
npx skills add ortus-boxlang/skills/boxlang-developer/modules-and-packages
npx skills add ortus-boxlang/skills/boxlang-developer/deployment
npx skills add ortus-boxlang/skills/boxlang-developer/classes-and-oop
npx skills add ortus-boxlang/skills/boxlang-developer/functional-programming
# Single skill from boxlang-core-development
npx skills add ortus-boxlang/skills/boxlang-core-development/module-development
npx skills add ortus-boxlang/skills/boxlang-core-development/bif-development
npx skills add ortus-boxlang/skills/boxlang-core-development/interceptors
npx skills add ortus-boxlang/skills/boxlang-core-development/component-development
npx skills add ortus-boxlang/skills/boxlang-core-development/runtime-architecture
# Single skill from commandbox
npx skills add ortus-boxlang/skills/commandbox/commandbox-setup
npx skills add ortus-boxlang/skills/commandbox/commandbox-usage
npx skills add ortus-boxlang/skills/commandbox/commandbox-package-management
npx skills add ortus-boxlang/skills/commandbox/commandbox-embedded-server
npx skills add ortus-boxlang/skills/commandbox/commandbox-task-runners
npx skills add ortus-boxlang/skills/commandbox/commandbox-developing
npx skills add ortus-boxlang/skills/commandbox/commandbox-config-settings
npx skills add ortus-boxlang/skills/commandbox/commandbox-deploying
npx skills add ortus-boxlang/skills/commandbox/commandbox-testing# List installed skills
npx skills list
# Update all skills to latest
npx skills update
# Remove a skill
npx skills remove boxlang-dev-boxlang-language-fundamentals
# Search for skills
npx skills find boxlangIf you prefer not to use the npx skills CLI — or if you are adding skills to a tool that supports its own marketplace or custom knowledge files — you can download individual SKILL.md files directly from this repository and place them wherever your tool expects them.
Claude Projects let you attach files as project knowledge that Claude reads at the start of every conversation. Add any SKILL.md from this repo as a support file to give Claude deep BoxLang expertise without any CLI tooling.
boxlang-developer/language-fundamentals/SKILL.mdboxlang-developer/web-development/SKILL.mdboxlang-core-development/module-development/SKILL.mdcommandbox/commandbox-embedded-server/SKILL.mdcommandbox/commandbox-package-management/SKILL.mdRaw file URLs follow this pattern:
https://raw.githubusercontent.com/ortus-boxlang/skills/main/<category>/<skill>/SKILL.mdExample:
https://raw.githubusercontent.com/ortus-boxlang/skills/main/boxlang-developer/language-fundamentals/SKILL.md.claude/ directory)Claude Code automatically picks up Markdown files placed in .claude/skills/ inside your project. Copy any SKILL.md directly:
To install this repo as a Claude Code plugin marketplace, use the /plugin command:
/plugin marketplace add ortus-boxlang/skills
/plugin install boxlang-agent-skills@boxlang-agent-skillsOr add a single skill file manually:
# Add a single skill manually
mkdir -p .claude/skills
curl -o .claude/skills/boxlang-dev-boxlang-language-fundamentals.md \
https://raw.githubusercontent.com/ortus-boxlang/skills/main/boxlang-developer/language-fundamentals/SKILL.mdOr use the npx skills CLI which handles this automatically (see Quick Install above).
| Tool | Where to place the skill file |
|---|---|
| Claude Code | .claude/skills/<name>.md (project) or ~/.claude/skills/<name>.md (global) |
| Cursor | .cursor/rules/<name>.mdc |
| GitHub Copilot | append to .github/copilot-instructions.md |
| OpenHands | .openhands/instructions.md |
| Codex | .codex/<name>.md |
| Windsurf | .windsurf/rules/<name>.md |
The npx skills CLI detects which agents you have installed and places skills in the right location automatically:
| Agent | Skills Location |
|---|---|
| Claude Code | ~/.claude/skills/ (personal) or .claude/skills/ (project) |
| Cursor | .cursor/rules/ |
| GitHub Copilot | .github/copilot-instructions.md |
| OpenHands | .openhands/ |
| Codex | .codex/ |
| Windsurf | .windsurf/rules/ |
For manual placement and Claude Project support files, see Direct / Manual Installation above.
BoxLang is a modern, dynamic JVM language (JRE 21+) designed for rapid application development. It features:
bx-compat-cfml| Resource | Link |
|---|---|
| BoxLang Documentation | https://boxlang.ortusbooks.com/ |
| BoxLang GitHub | https://github.com/ortus-boxlang/BoxLang |
| CommandBox Documentation | https://commandbox.ortusbooks.com/ |
| CommandBox GitHub | https://github.com/Ortus-Solutions/commandbox |
| Module Template | https://github.com/ortus-boxlang/boxlang-module-template |
| ForgeBox (packages) | https://forgebox.io |
| Ortus Community | https://community.ortussolutions.com/ |
| BoxLang Slack | https://boxlang.io/slack |
| skills.sh | https://skills.sh |
Contributions are welcome! To add or improve a skill:
SKILL.md filename and descriptionSkills should contain accurate, working code examples verified against the BoxLang documentation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.