elysia
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes standard development commands for initializing a project using the Bun runtime (
bun create elysia my-api). These are legitimate setup instructions for the framework. - [CREDENTIALS_SAFE]: The code examples demonstrate secure practices for handling sensitive data, specifically instructing users to use environment variables (
process.env.ADMIN_TOKEN,process.env.JWT_SECRET) rather than hardcoding credentials. - [PROMPT_INJECTION]: The instructions are purely technical and do not contain any patterns designed to override agent behavior or bypass safety guardrails.
- [DATA_EXFILTRATION]: No unauthorized network operations or access to sensitive local files (e.g., SSH keys, cloud credentials) were found. The listed network operations are local development servers (
localhost:3000).
Audit Metadata