bun-build
Warn
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [Dynamic Execution] (MEDIUM): The skill utilizes
bun build --compileto generate binary executables from source code. Specifically, the 'Post-build' section instructs the agent to execute the resulting binary (e.g.,./app --help). This represents runtime compilation and execution of dynamically generated artifacts. - [Indirect Prompt Injection] (LOW): This skill presents an attack surface where malicious instructions could be embedded in the source data.
- Ingestion points: The
<entry>file (e.g.,index.ts) is read and processed by the Bun compiler. - Boundary markers: No specific boundary markers or instructions to ignore embedded prompts are provided during the build process.
- Capability inventory: The skill has access to the
Bashtool, enabling it to execute the build command and the resulting binary. - Sanitization: There is no evidence of sanitization or validation of the input source file before it is compiled and executed.
- [Command Execution] (LOW): The skill is designed to run arbitrary shell commands via the
Bashtool to perform builds and verify outputs. This is a powerful capability that, while intended, relies on the integrity of the environment and the inputs provided to the agent.
Audit Metadata