elysiajs

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily educational and serves as a documentation router for ElysiaJS.
  • [EXTERNAL_DOWNLOADS]: The skill references official installation commands for Bun and ElysiaJS. These are standard developer operations and target well-known, trusted domains such as bun.sh and registry.npmjs.org.
  • [COMMAND_EXECUTION]: Documentation includes standard CLI examples for project initialization (bun create elysia) and dependency management (bun add). All commands are within the context of the framework's intended use and do not involve suspicious or obfuscated execution patterns.
  • [CREDENTIALS_UNSAFE]: References to secrets (e.g., JWT_SECRET, my-secret) are provided as placeholders for configuration purposes, following best practices for environment variable management.
  • [REMOTE_CODE_EXECUTION]: The provided scripts (e.g., check-updates.py) are utility tools for local maintenance of the skill's integrity and do not perform any remote code execution or unauthorized network activities beyond checking the latest package version on the npm registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:29 AM
Security Audit — agent-trust-hub — elysiajs