📦

bun

Name: bun
Author: brianlovin

Content revision r1 Safe ⚙️ External commands🔑 Env variables

Build Faster With Bun

Developers often maintain separate Node.js tools, scripts, and configuration for common workflows. This skill maps those workflows to Bun and explains Bun APIs for faster application development.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "bun" from https://skillstore.io/skills/brianlovin-bun.md and its manifest at https://skillstore.io/api/skills/brianlovin-bun/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/brianlovin-bun.md Signed manifest GET /api/skills/brianlovin-bun/manifest Signed lockfile GET /api/skills/brianlovin-bun/lockfile

Test it

Using "bun". Replace npm install, npm test, and npm run dev with Bun commands.

Expected outcome:

Use bun install for dependency installation.
Use bun test for the test suite.
Use bun run dev for the development script.

Using "bun". Which Bun API should serve a small application with routes and WebSockets?

Expected outcome:

Use Bun.serve as the central server API. Define routes for HTTP requests and add a WebSocket handler when the application needs persistent client connections.

Using "bun". How should a team validate a move from Node.js to Bun?

Expected outcome:

Run the existing tests, compare dependency behavior, verify environment loading, exercise build and development commands, and test production-like server paths.

Security Audit

Safe

v1 • 9/9/2026 Open versioned report

All 28 static findings are false positives caused by Markdown code spans, examples, and API documentation in SKILL.md. No evidence found of executed commands, secret exfiltration, prompt injection, or reconnaissance behavior.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (25)

🔑 Env variables (1)

SKILL.md:21

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/brianlovin-bun/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/brianlovin-bun/security.svg)](https://skillstore.io/skills/brianlovin-bun?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/brianlovin-bun?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brianlovin-bun/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/brianlovin-bun.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

brianlovin. (2026). bun security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brianlovin-bun/audits/1

BibTeX citation

@techreport{brianlovin-brianlovin-bun-2026,
  author = {brianlovin},
  title = {bun security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/brianlovin-bun/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bun security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "brianlovin"
date-released: "2026-09-09"
url: "https://skillstore.io/skills/brianlovin-bun/audits/1"
identifiers:
  - type: other
    value: "skillstore:brianlovin-bun:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Migrate a Node.js Project

Translate package, test, build, and development commands from Node.js tooling to Bun.

Create a Bun Web Server

Plan a small server with Bun.serve, routes, WebSockets, HTML imports, and hot reload.

Set Up Bun Testing

Convert basic tests to bun:test and choose a practical command for running the test suite.

Try These Prompts

Map My Commands

Convert these Node.js and npm commands to Bun equivalents. Preserve the intent and explain any important differences: [paste commands].

Explain a Bun API

Explain how to use this Bun API in a small TypeScript project. Include the purpose, required setup, and one concise usage example: [API name].

Plan a Bun Server

Design a Bun.serve structure for this application. Cover routes, static assets, WebSockets if needed, environment configuration, and local development commands: [application details].

Review a Bun Migration

Review this project migration from Node.js to Bun. Identify incompatible assumptions, command changes, test changes, environment concerns, and a staged validation plan: [project details].

Best Practices

Check Bun version compatibility before changing project commands or APIs.
Keep environment files private and document required variables without exposing secret values.
Validate migrated tests, builds, routes, and database behavior before deployment.

Avoid

Do not assume every Node.js dependency behaves identically under Bun.
Do not place secrets in source files, examples, or committed environment files.
Do not pass untrusted input directly into shell commands.

Frequently Asked Questions

What does this skill help with?

It explains Bun commands, APIs, testing, servers, bundling, and common development workflows.

Can it migrate my project automatically?

No. It provides migration guidance and review support, but it does not edit files or run commands.

Does it replace Node.js documentation?

No. It focuses on Bun equivalents and Bun-specific patterns. Consult official documentation for unsupported or version-specific behavior.

Can it help build an HTTP server?

Yes. It explains Bun.serve, routes, static assets, WebSockets, HTML imports, and local development.

Does it support testing?

Yes. It covers bun:test and command mappings for running test suites.

Is it a security scanner?

No. It offers basic safety guidance, but it does not perform a complete application security audit.

Developer Details

Author

brianlovin

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/brianlovin/agent-config/tree/1a9819ebf3fee811150fc76cbe177ea4e5f747ff/skills/bun

Ref

367c7bb3962eb92a1b87fc08b2947aeda00cd51d

Maintenance freshness

9/9/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md