electrobun-rpc-patterns

Warn

Audited by Snyk on Feb 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill provides RPC handlers that run arbitrary commands (Bun.spawn/executeCommand) and write or stream arbitrary files (Bun.write, fs.readdir, Bun.file), which enable changing the host filesystem and executing processes (potentially creating users or modifying services) even though it does not explicitly request sudo or bypass security mechanisms.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 22, 2026, 07:51 AM