electrobun-best-practices

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references bunx electrobun init for project initialization, which downloads the framework CLI from the NPM registry.
  • [EXTERNAL_DOWNLOADS]: Documents the Updater API for fetching application updates from a remote repository configured via the release.baseUrl parameter.
  • [REMOTE_CODE_EXECUTION]: The Updater module provides an applyUpdate method to install and execute downloaded application bundles.
  • [COMMAND_EXECUTION]: Supports build lifecycle hooks (preBuild, postBuild, postWrap, postPackage) that allow execution of local project scripts during the build process.
  • [COMMAND_EXECUTION]: Includes standard development commands such as electrobun run, electrobun dev, and electrobun build.
  • [PROMPT_INJECTION]: No prompt injection or safety bypass patterns were identified in the skill content.
  • [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill provides clear instructions for using sandbox: true and setNavigationRules to isolate untrusted web content and prevent data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 03:47 AM