bun-development
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Bun runtime installer from bun.sh.
- [REMOTE_CODE_EXECUTION]: The installation steps involve piping remote scripts from bun.sh directly to system shells (bash or PowerShell), which is the standard and official installation method for this runtime.
- [COMMAND_EXECUTION]: Provides detailed usage of the bun command-line interface for project scaffolding, script execution, and package management.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing local project files and managing external dependencies, which is a typical development attack surface. 1. Ingestion points: package.json, tsconfig.json, and local source files. 2. Boundary markers: Absent. 3. Capability inventory: Command execution via bun run, file system access via Bun.file, and network server capability via Bun.serve. 4. Sanitization: Absent.
Audit Metadata