bun-docs

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation references official installation scripts hosted on official domains such as bun.sh and bun.com. These are well-known technology service domains.
  • [COMMAND_EXECUTION]: The documentation describes built-in APIs for executing shell commands and managing child processes, specifically Bun.shell and Bun.spawn. These are core features of the Bun runtime intended for automation and system interaction.
  • [REMOTE_CODE_EXECUTION]: The documentation provides examples for using the Foreign Function Interface (bun:ffi) to interact with native libraries and runtime C compilation using the cc function. These represent standard developer-facing capabilities of the environment.
  • [DATA_EXFILTRATION]: Various networking and storage APIs are documented, including fetch, Bun.serve, and native clients for S3, Redis, and SQL databases. These are legitimate features of a server-side runtime and do not indicate malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 08:27 PM
Security Audit — agent-trust-hub — bun-docs