pma-bun
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a comprehensive implementation guide focused on security best practices, including mandatory input validation via Zod, CSRF/XSS protections, and the use of Bun's native password hashing utilities.- [COMMAND_EXECUTION]: Build and development workflows utilize standard commands such as
bun run,bun build, andbunx nsl. These are used for project scaffolding, compilation, and local development routing.- [EXTERNAL_DOWNLOADS]: The skill references standard NPM packages and registries. It includes procedures for verifying dependency freshness and auditing vulnerabilities usingbun audit.- [INDIRECT_PROMPT_INJECTION]: The skill mandates a 'Routing Hard Lock' using@hono/zod-openapi, which requires all API entry points to be validated against strict schemas, effectively mitigating injection risks from untrusted user input.
Audit Metadata