bx-mail — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bx-mail (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
install-bx-module bx-mail
# CommandBox
box install bx-mailbx:mail
from="[email protected]"
to="[email protected]"
subject="Hello from BoxLang!"
{
writeOutput( "This is the email body." )
}bx:mail
from="[email protected]"
to="[email protected]"
subject="Your Order Confirmation"
server="smtp.myapp.com"
port=587
username="smtp-user"
password="smtp-secret"
useTLS=true
type="html"
{
writeOutput( "<h1>Thank you for your order!</h1><p>Order #12345 confirmed.</p>" )
}bx:mailparam)// Template syntax<bx:mail
from="[email protected]"
to="[email protected]"
subject="Monthly Report"
mimeAttach="/app/reports/march-2026.pdf"
>
Please find your monthly report attached.
</bx:mail>// Script syntax — explicit attachment via bx:mailparam
bx:mail from="[email protected]" to="[email protected]" subject="Monthly Report" {
writeOutput( "Please find your monthly report attached." )
bx:mailparam
file="/app/reports/march-2026.pdf"
fileName="March-2026-Report.pdf"
type="application/pdf"
disposition="attachment"
}<bx:mail from="[email protected]" to="[email protected]" subject="Welcome!">
<bx:mailpart type="text">
Welcome to MyApp! Visit https://myapp.com to get started.
</bx:mailpart>
<bx:mailpart type="html">
<h1>Welcome to MyApp!</h1>
<p>Click <a href="https://myapp.com">here</a> to get started.</p>
</bx:mailpart>
<bx:mailparam
file="/app/assets/welcome-guide.pdf"
fileName="Welcome-Guide.pdf"
type="application/x-pdf"
disposition="attachment"
/>
</bx:mail>bx:mail from="[email protected]" to="[email protected]" subject="Reset Password" {
bx:mailparam name="X-Priority" value="1"
bx:mailparam name="X-Mailer" value="MyApp v2.0"
bx:mailparam name="List-Unsubscribe" value="<mailto:[email protected]>"
writeOutput( "Click here to reset your password." )
}{
"modules": {
"mail": {
"settings": {
"mailServers": [
{
"smtp": "smtp.sendgrid.net",
"port": 587,
"username": "apikey",
"password": "${SENDGRID_API_KEY}",
"tls": true,
"ssl": false
}
]
}
}
}
}bx:mail
from="[email protected]"
to="[email protected]"
subject="Signed Email"
sign=true
keystore="/app/certs/keystore.jks"
keystorePassword="keystorePass"
keyAlias="myKey"
keyPassword="keyPass"
{
writeOutput( "This email is digitally signed." )
}boxlang.json over hardcoding server/port/credentials in each bx:mail calltype="html" for HTML emails, otherwise the body renders as plain textbx:mailpart — don't set type on the outer bx:mailmimeAttach only supports a single file — use bx:mailparam for multiple attachments~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.