bun-docs
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references official installation scripts hosted on official domains such as
bun.shandbun.com. These are well-known technology service domains. - [COMMAND_EXECUTION]: The documentation describes built-in APIs for executing shell commands and managing child processes, specifically
Bun.shellandBun.spawn. These are core features of the Bun runtime intended for automation and system interaction. - [REMOTE_CODE_EXECUTION]: The documentation provides examples for using the Foreign Function Interface (
bun:ffi) to interact with native libraries and runtime C compilation using theccfunction. These represent standard developer-facing capabilities of the environment. - [DATA_EXFILTRATION]: Various networking and storage APIs are documented, including
fetch,Bun.serve, and native clients for S3, Redis, and SQL databases. These are legitimate features of a server-side runtime and do not indicate malicious intent.
Audit Metadata