esbuild-bundler
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for esbuild. The provided configuration examples, build scripts, and plugin patterns are standard within the JavaScript/TypeScript development ecosystem.
- [COMMAND_EXECUTION]: Includes instructional CLI examples (e.g.,
esbuild --bundle) for local development use. These commands are typical for build tool documentation and do not perform unauthorized or hidden operations. - [EXTERNAL_DOWNLOADS]: References common Node.js packages such as
esbuildandesbuild-plugin-tscin code examples. These are well-known tools in the web development community. - [DATA_EXPOSURE]: Includes an example of how to inject environment variables into a bundle using a plugin. This is a standard build-time pattern and does not represent a credential exfiltration risk within the context of this documentation.
- [OBFUSCATION]: Analysis of all code and text sections confirmed the absence of Base64 encoding, zero-width characters, homoglyphs, or other hidden content techniques.
Audit Metadata