skills.rest
Charitablebusinessronin
CharitablebusinessroninCOMMUNITY
Explore all skills by this author →
GitHub

bun-security

Enforces Bun-only security policies and detects CanisterWorm indicators in Bun-based repositories.

Updated Mar 18, 2026
Search Tags:#security#audit#bun#policy#canisterworm#npm-ban
One-click install
npx skills add https://github.com/Charitablebusinessronin/Allura_Memory --skill bun-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bun-security
Source: https://github.com/Charitablebusinessronin/Allura_Memory/tree/main/.claude/skills/bun-security
Command: npx skills add https://github.com/Charitablebusinessronin/Allura_Memory --skill bun-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security policy enforces Bun-only workflows, blocks npm-related steps, and surfaces CanisterWorm indicators to keep Bun projects safe.

Core Features & Use Cases

  • Enforce Bun-only commands: allow bun install, bun run, and bun tsx while blocking npm-based workflows.
  • Detect CanisterWorm indicators: identify malware artifacts and suspicious activity within repositories.
  • Governance-ready audits: verify lockfile status and postinstall absence to support safe promotions.

Quick Start

Run a Bun-only security audit on your project to verify policy compliance and CanisterWorm indicators.

Frequently Asked Questions about bun-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce Bun-only security policies and block npm usage in my repository?▼

To enforce Bun-only security policies, you can run an audit that allows bun install and bun run while actively blocking npm-based workflows and postinstall hooks across development, CI, and production environments.

What is a CanisterWorm indicator and how do I detect it in a Bun project?▼

CanisterWorm indicators are malware artifacts and suspicious activities within repositories. You detect them in a Bun project by running a security audit that surfaces these malware indicators to keep your environment safe.

How do I verify lockfile status and postinstall absence for audit-ready reporting?▼

You verify lockfile status and postinstall absence by executing governance-ready audits on your Bun repository, ensuring safe promotions and generating the necessary reports for policy enforcement compliance.

Can I integrate Bun security checks into an existing CI policy engine?▼

Yes, you can integrate these checks into a policy engine because the security audit generates script-based outputs designed for dev, CI, and production environments to verify policy compliance.

Does this security audit work for repositories that still use npm workflows?▼

No, this security audit is specifically designed for Bun-based repositories and will actively block npm-related steps, making it unsuitable for projects still relying on npm workflows.

Related Skills

Explore More Software Engineering Skills→
jonaspmjonaspm
39

bun

Execute JavaScript and TypeScript workflows with the Bun runtime and package manager.

Community
Intermediate
rohitg00rohitg00
944

k8s-policy

Enforce and audit Kubernetes policies using Kyverno and Gatekeeper.

Community
Intermediate
HabitaNexusHabitaNexus
1

Container Security

Scan, sign, and monitor container images across Kubernetes clusters.

Official
Advanced
WhatIfWeDigDeeperWhatIfWeDigDeeper
1

js-deps

Manage JavaScript package dependencies across npm, yarn, pnpm, and bun projects.

Community
Advanced