bun-profiling
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and reference documents provide legitimate technical guidance on using Bun's profiling features, process management flags, and memory monitoring APIs. The examples provided are consistent with standard developer workflows for debugging performance and memory issues.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of external profiling data which could theoretically contain malicious instructions embedded within application identifiers.
- Ingestion points: Markdown reports generated by the --cpu-prof-md and --heap-prof-md flags as described in SKILL.md and reference files.
- Boundary markers: The instructions do not define specific markers or guardrails for the agent when processing the output of these reports.
- Capability inventory: The skill uses tools for file system access (Read, Write) and shell command execution (Bash).
- Sanitization: There are no explicit instructions to sanitize function names or object types extracted from the profiling reports before processing.
Audit Metadata