bun-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard system commands like 'docker' and 'bun' to verify environment readiness and manage container operations, which is appropriate for its devops purpose.
- [EXTERNAL_DOWNLOADS]: Fetches the skill's source markdown from a public GitHub repository during installation. This is a trusted source and necessary for the skill's delivery.
- [SAFE]: Implements security-hardened container templates that use multi-stage builds and unprivileged user accounts to minimize the attack surface.
- [SAFE]: The skill ingests project configuration files (package.json) to prepare deployments. While it lacks explicit boundary markers, this behavior is standard for deployment tools. Ingestion point: reads project files in SKILL.md. Boundary markers: absent. Capability inventory: uses Bash and Write tools. Sanitization: absent.
Audit Metadata