stack-validator
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The validation script executes
bun --versionto verify the local installation of the Bun runtime. - [EXTERNAL_DOWNLOADS]: Provides instructions to download and install the Bun runtime from its official website (
bun.sh) if it is not detected on the system. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes project-level configuration files (such as
package.json,biome.json, and CSS files) and source code to identify deprecated patterns or configuration errors. It does not perform sensitive operations based on the content of these files beyond reporting findings to the user. - [CREDENTIALS_UNSAFE]: The reference documentation includes placeholder examples for Clerk API keys (e.g.,
pk_...,sk_...). These are non-functional documentation artifacts and do not represent a credential leak.
Audit Metadata