bun
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the official method for installing the Bun runtime, which involves downloading a script from a well-known service URL (
https://bun.sh/install) and piping it directly to a shell interpreter (bash) or PowerShell (iex). These commands are standard for the Bun toolchain and originate from the project's official domain. - [EXTERNAL_DOWNLOADS]: Includes various commands that download and manage external software components, such as npm packages and project templates, using the
bun installandbunxcommands which interface with official registries.
Audit Metadata