The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/validate.py uses subprocess.run(['bun', '--version']) to verify the local Bun installation. This is a standard check for the skill's primary purpose and does not incorporate untrusted input.
[EXTERNAL_DOWNLOADS]: The script scripts/validate.py contains strings pointing to the official Bun installation script (https://bun.sh/install). These are provided strictly as informational 'Fix' messages in the console output when Bun is not found on the system; the skill does not automatically execute these commands.
[REMOTE_CODE_EXECUTION]: Automated scanners flagged the presence of curl | bash patterns. However, manual review confirms these are static strings within help messages intended for the user to run manually if they choose. The script does not invoke these remote payloads programmatically.

bun-validator