Skip to main content

bun-runtime

Facilitates efficient file I/O, HTTP server management, and native API usage in Bun's high-performance runtime environment.

Install this skill

or
76/100

Security score

The bun-runtime skill was audited on Feb 22, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 89

Template literal with variable interpolation in command context

SourceSKILL.md
89ws.send(`Echo: ${message}`);
medium line 215

Template literal with variable interpolation in command context

SourceSKILL.md
215await Bun.write(`./uploads/${file.name}`, file);
medium line 240

Template literal with variable interpolation in command context

SourceSKILL.md
240const envConfig = await Bun.file(`./config.${env}.json`).json();
medium line 27

Access to .env file

SourceSKILL.md
27- `Bun.env` - Type-safe environment variables
low line 122

Access to .env file

SourceSKILL.md
122const apiKey = Bun.env.API_KEY;
low line 124

Access to .env file

SourceSKILL.md
124// Also valid - process.env works but Bun.env is preferred
low line 125

Access to .env file

SourceSKILL.md
125const port = process.env.PORT ?? "3000";
low line 239

Access to .env file

SourceSKILL.md
239const env = Bun.env.NODE_ENV ?? "development";
Scanned on Feb 22, 2026
View Security Dashboard