skills/outfitter-dev/agents/bun-dev/Gen Agent Trust Hub

bun-dev

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard development patterns for the Bun ecosystem and does not contain any malicious instructions, obfuscation, or hidden behaviors.
  • [SAFE]: It emphasizes security best practices, including mandatory use of prepared statements to prevent SQL injection and the argon2id algorithm for secure password hashing.
  • [COMMAND_EXECUTION]: Provides patterns for executing shell commands using Bun's native $ template and Bun.spawn. These are documented for legitimate development purposes and use Bun's built-in safety features like auto-escaping for variables.
  • [EXTERNAL_DOWNLOADS]: Documents standard package management (bun install) and references well-known, trusted libraries such as Hono, Zod, and Sharp.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes handling untrusted data (HTTP requests, file uploads) but mitigates risks by demonstrating input validation with Zod and explicit directory traversal checks (filename.includes('..')).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:38 AM