electrobun-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references
bunx electrobun initfor project initialization, which downloads the framework CLI from the NPM registry. - [EXTERNAL_DOWNLOADS]: Documents the
UpdaterAPI for fetching application updates from a remote repository configured via therelease.baseUrlparameter. - [REMOTE_CODE_EXECUTION]: The
Updatermodule provides anapplyUpdatemethod to install and execute downloaded application bundles. - [COMMAND_EXECUTION]: Supports build lifecycle hooks (
preBuild,postBuild,postWrap,postPackage) that allow execution of local project scripts during the build process. - [COMMAND_EXECUTION]: Includes standard development commands such as
electrobun run,electrobun dev, andelectrobun build. - [PROMPT_INJECTION]: No prompt injection or safety bypass patterns were identified in the skill content.
- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill provides clear instructions for using
sandbox: trueandsetNavigationRulesto isolate untrusted web content and prevent data exposure.
Audit Metadata