bun-package-manager
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and examples for a legitimate development tool and does not contain any malicious instructions or obfuscated content.\n- [EXTERNAL_DOWNLOADS]: References downloading packages from the official npm registry (registry.npmjs.org) and well-known, trusted GitHub repositories (e.g., iamkun/dayjs, lodash/lodash, and colinhacks/zod). These sources are standard in the JavaScript ecosystem.\n- [COMMAND_EXECUTION]: Documents the use of Bun CLI commands for package installation and execution. It highlights important security configurations, including the use of
trustedDependenciesand the--ignore-scriptsflag to mitigate risks associated with untrusted third-party lifecycle scripts.
Audit Metadata