electrobun-rpc-patterns
Warn
Audited by Snyk on Feb 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill provides RPC handlers that run arbitrary commands (Bun.spawn/executeCommand) and write or stream arbitrary files (Bun.write, fs.readdir, Bun.file), which enable changing the host filesystem and executing processes (potentially creating users or modifying services) even though it does not explicitly request sudo or bypass security mechanisms.
Audit Metadata