skills/zzci/skills/pma-bun/Gen Agent Trust Hub

pma-bun

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a comprehensive implementation guide focused on security best practices, including mandatory input validation via Zod, CSRF/XSS protections, and the use of Bun's native password hashing utilities.- [COMMAND_EXECUTION]: Build and development workflows utilize standard commands such as bun run, bun build, and bunx nsl. These are used for project scaffolding, compilation, and local development routing.- [EXTERNAL_DOWNLOADS]: The skill references standard NPM packages and registries. It includes procedures for verifying dependency freshness and auditing vulnerabilities using bun audit.- [INDIRECT_PROMPT_INJECTION]: The skill mandates a 'Routing Hard Lock' using @hono/zod-openapi, which requires all API entry points to be validated against strict schemas, effectively mitigating injection risks from untrusted user input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 07:51 PM
Security Audit — agent-trust-hub — pma-bun