bun-nextjs
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute standard development commands including 'bun install', 'bun run dev', 'bun run build', and 'bunx create-next-app'. These are routine operations for managing Bun-based JavaScript projects.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading project dependencies from official registries via 'bun install' and installing the official Vercel CLI ('bun add -g vercel') for deployment purposes. These references target well-known and trusted technology services.
- [DATA_EXFILTRATION]: While the skill demonstrates reading and writing local files ('Bun.file', 'Bun.write') and interacting with a local SQLite database, these operations are performed within the application's local environment. It uses standard example placeholders for external API endpoints (e.g., 'https://api.example.com') and environment variables ('API_SECRET').
- [SAFE]: The skill demonstrates security best practices by using parameterized queries ('db.run("INSERT INTO users (name) VALUES (?)", [name])') to prevent SQL injection vulnerabilities. The use of 'bun:ffi' and 'bun:sqlite' in the configuration is standard for integrating Next.js with the Bun runtime environment.
Audit Metadata