write-script-bun
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
wmillCLI commands includingscript preview,script run,generate-metadata, andsync push. These commands allow the agent to run local code, interact with the workspace, and modify local configuration files like.script.lockandwmill-lock.yaml. - [DYNAMIC_EXECUTION]: The skill is centered around writing TypeScript code that is then executed via the Bun runtime. It describes patterns for defining a
mainfunction and utilizing thewindmill-clientSDK to dynamically run other scripts (runScriptByPath) or flows (runFlow) within the platform. - [INDIRECT_PROMPT_INJECTION]: The agent is prompted to read project-specific files such as
AGENTS.md,rt.d.ts, and local script files to infer correct command arguments and metadata updates. - Ingestion points: Reads script files,
rt.d.ts(resource types), andAGENTS.md(project preferences). - Boundary markers: None explicitly defined for script argument generation.
- Capability inventory: Execution of arbitrary TypeScript code via
wmill script previewand local file modification viawmill generate-metadata. - Sanitization: Not mentioned; the skill relies on the agent to pick 'plausible args' from the script's signature.
- [DATA_EXPOSURE]: The skill documentation references the use of sensitive environment variables like
WM_TOKENfor authentication and theRT(Resource Type) namespace for accessing secrets like API keys. These are standard platform features for the Windmill environment.
Audit Metadata