deno-to-bun
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard technical migration guide for transitioning Deno projects to the Bun runtime. It includes clear instructions for mapping Deno APIs to Bun or Node.js equivalents.
- [SAFE]: Includes a dedicated security reference (references/permissions.md) that explicitly warns users and the agent about Bun's lack of a built-in permission system (compared to Deno's secure-by-default model). It provides valid remediation strategies such as application-level path validation, domain whitelisting, and the use of containerization (Docker) for isolation.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it instructs the agent to read and analyze project files (e.g., deno.json, source code via grep). However, this is consistent with its primary purpose, and the provided security guidelines in the reference files mitigate risks associated with processing untrusted project code. The severity is low and does not escalate the verdict.
- [COMMAND_EXECUTION]: The skill uses standard CLI tools (bun, deno, grep, ls) to perform environment analysis and project verification. These are routine operations within a development migration workflow.
Audit Metadata