bun-test
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for Bun testing, containing standard configuration files and code examples.
- [COMMAND_EXECUTION]: The skill uses the Bash tool for routine project setup and test execution (e.g.,
mkdir -p tests/,bun test). These commands are relevant to the skill's primary function and operate within the local project scope. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (API responses and fixtures), creating a theoretical attack surface, it represents standard testing practices. Evidence chain: 1) Ingestion: Test fixtures and API endpoints (references/examples.md). 2) Boundaries: Absent. 3) Capabilities: Bash, Write, Read tools (SKILL.md). 4) Sanitization: Absent. The risk is considered negligible given the context.
Audit Metadata