bun-hot-reloading
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains standard educational content for Bun development tooling. All provided code snippets for network operations (Bun.serve) and filesystem interaction (fs.watch) are restricted to local development environments.
- [DYNAMIC_EXECUTION]: The skill demonstrates using dynamic
import()for module cache-busting (e.g.,import(./src/server.ts?t=${Date.now()})). This is an idiomatic JavaScript pattern for hot-reloading local modules and does not execute remote or untrusted code. - [INDIRECT_PROMPT_INJECTION]: The skill includes code templates that ingest local file data and HTTP request headers to facilitate live reloading and module replacement.
- Ingestion points: Filesystem events from the
./srcdirectory viawatchand incoming HTTP request headers viaBun.serve. - Boundary markers: Uses standard module isolation provided by the JavaScript runtime.
- Capability inventory: Includes filesystem watching, network server creation, and dynamic module loading, all scoped to the local environment.
- Sanitization: Standard for development-time architectural templates where input is assumed to be from the local developer.
Audit Metadata