exa

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: Fetches the installation script for the Bun runtime from the official bun.sh domain.
[REMOTE_CODE_EXECUTION]: Performs a piped installation of the Bun runtime using curl | bash to establish the necessary execution environment.
[COMMAND_EXECUTION]: Utilizes npx to execute the api2cli package for bundling and linking the exa command-line interface to the system's path.

Audit Metadata

Risk Level

SAFE

Analyzed

Mar 23, 2026, 09:34 AM

Security Audit — agent-trust-hub — exa