Bun Macros
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The macro 'gitCommit' in 'macros/git.ts' uses 'Bun.spawnSync' to run system commands, which is a medium risk pattern for build-time execution.
- [EXTERNAL_DOWNLOADS] (LOW): The 'fetchSchema' macro in 'macros/fetch.ts' makes external network requests to 'api.example.com' during bundling.
- [DATA_EXFILTRATION] (LOW): Macros access sensitive environment variables and read local files, potentially exposing credentials or private data if misconfigured.
- [PROMPT_INJECTION] (LOW): The skill facilitates processing external data while having shell execution capabilities. Ingestion: 'macros/fetch.ts', 'macros/embed.ts'. Boundaries: Absent. Capability: 'Bun.spawnSync'. Sanitization: Absent.
Audit Metadata