Skip to main content

bun-development

Facilitates modern JavaScript/TypeScript development using the Bun runtime, enhancing speed and efficiency in project setup and management.

Install this skill

or
25/100

Security score

The bun-development skill was audited on May 13, 2026 and we found 23 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 310

Template literal with variable interpolation in command context

SourceSKILL.md
310return new Response(`Error: ${error.message}`, { status: 500 });
medium line 314

Template literal with variable interpolation in command context

SourceSKILL.md
314console.log(`Server running at http://localhost:${server.port}`);
medium line 338

Template literal with variable interpolation in command context

SourceSKILL.md
338console.log(`Received: ${message}`);
medium line 339

Template literal with variable interpolation in command context

SourceSKILL.md
339ws.send(`Echo: ${message}`);
high line 33

Piping content to bash shell

SourceSKILL.md
33curl -fsSL https://bun.sh/install | bash
high line 591

Piping content to bash shell

SourceSKILL.md
591curl -fsSL https://bun.sh/install | bash
medium line 33

Curl to non-GitHub URL

SourceSKILL.md
33curl -fsSL https://bun.sh/install | bash
medium line 591

Curl to non-GitHub URL

SourceSKILL.md
591curl -fsSL https://bun.sh/install | bash
low line 243

Access to .env file

SourceSKILL.md
243// .env file is loaded automatically!
low line 246

Access to .env file

SourceSKILL.md
246const apiKey = Bun.env.API_KEY;
low line 247

Access to .env file

SourceSKILL.md
247const port = Bun.env.PORT ?? "3000";
low line 249

Access to .env file

SourceSKILL.md
249// Or use process.env (Node.js compatible)
low line 250

Access to .env file

SourceSKILL.md
250const dbUrl = process.env.DATABASE_URL;
low line 255

Access to .env file

SourceSKILL.md
255bun --env-file=.env.production run index.ts
low line 533

Access to .env file

SourceSKILL.md
533"process.env.NODE_ENV": JSON.stringify("production"),
low line 577

Access to .env file

SourceSKILL.md
577console.log(process.env.HOME);
low line 33

External URL reference

SourceSKILL.md
33curl -fsSL https://bun.sh/install | bash
low line 152

External URL reference

SourceSKILL.md
152bun add lodash --registry https://registry.npmmirror.com
low line 314

External URL reference

SourceSKILL.md
314console.log(`Server running at http://localhost:${server.port}`);
low line 591

External URL reference

SourceSKILL.md
591curl -fsSL https://bun.sh/install | bash
low line 693

External URL reference

SourceSKILL.md
693- [Bun Documentation](https://bun.sh/docs)
low line 695

External URL reference

SourceSKILL.md
695- [Elysia Framework](https://elysiajs.com/)
low line 696

External URL reference

SourceSKILL.md
696- [Bun Discord](https://bun.sh/discord)
Scanned on May 13, 2026
View Security Dashboard
Installation guide →