The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The pattern curl -fsSL https://example.com/install.sh | bash is mentioned in the "Caution" section strictly as a negative example (marked with ❌). The skill correctly identifies this as a dangerous practice and instructs the user not to execute scripts from unknown sources.
[EXTERNAL_DOWNLOADS]: The skill references installation via Homebrew and npm, targeting official and trusted repositories for the Bun runtime (oven-sh/bun).
[COMMAND_EXECUTION]: The instructions map standard Node.js commands to their Bun equivalents and include security warnings to verify package names before using bun add to mitigate typosquatting risks.
[INDIRECT_PROMPT_INJECTION]: The skill operates on local project files like package.json to manage dependencies and run scripts. This is a standard functionality for development tools and is paired with instructions to only execute trusted local code.

bun