bun-server-best-practices

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of markdown documentation and code examples intended to guide developers in using the @dangao/bun-server framework. All code patterns observed follow standard software engineering practices.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were found. The skill correctly recommends using environment variables (e.g., process.env.JWT_SECRET) and configuration services for managing secrets and connection strings.
  • [REMOTE_CODE_EXECUTION]: There are no instances of downloading and executing remote scripts or unverified code. The mentioned libraries and drivers (SQLite, PostgreSQL, MySQL) are standard industry tools.
  • [PROMPT_INJECTION]: The skill does not contain any instructions that attempt to override the AI agent's safety protocols or core behavior. The instructional language is focused entirely on the technical implementation of the framework.
  • [INDIRECT_PROMPT_INJECTION]: While the framework facilitates processing external data and LLM outputs, it includes built-in mitigations such as the AiGuardModule for safety checks (PII, injection, moderation) and a robust Validation system using DTO decorators to sanitize inputs.
  • [DYNAMIC_EXECUTION]: Dynamic logic is limited to standard framework features like dependency injection containers and runtime platform adaptation (Bun vs Node.js), which are used appropriately for application architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:41 AM