bun-development
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches the Bun installation script from the official
bun.shdomain and executes it directly via the shell or PowerShell. This is the standard, documented method for installing the Bun runtime and is provided for legitimate setup purposes.\n- [EXTERNAL_DOWNLOADS]: Includes instructions to download the Bun runtime, Homebrew taps fromoven-sh/bun, and various JavaScript packages from official registries and project repositories.\n- [INDIRECT_PROMPT_INJECTION]: Provides code examples for processing external data via the file system (Bun.file) and network requests (Bun.serve), which represent common ingestion points for untrusted data.\n - Ingestion points: File system and network request handlers in code snippets (SKILL.md).\n
- Boundary markers: None present in instructional examples.\n
- Capability inventory: Shell execution, file read/write, and network server capabilities described throughout the skill (SKILL.md).\n
- Sanitization: Not implemented in the provided educational examples.
Audit Metadata