bun-performance
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and reference material for performance optimization in the Bun runtime. It provides instructions for using official profiling flags and standard APIs.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes how to handle network requests using
Bun.serve, which introduces a surface for untrusted data ingestion. While it warns users to validate request-derived paths, it does not provide explicit instruction delimiters.\n - Ingestion points:
Bun.serveinreferences/native-apis-and-concurrency.mdprocesses thereqobject.\n - Boundary markers: Absent in the provided snippets.\n
- Capability inventory: Uses
Bun.file(read),Bun.write(write), andWorker(execution) inreferences/native-apis-and-concurrency.md.\n - Sanitization: The skill explicitly recommends path validation before file access in
references/native-apis-and-concurrency.md.
Audit Metadata