Trust Report

bun-dev-server

Set up high-performance development servers with Hot Module Replacement. Use when creating dev servers for web apps, setting up React Fast Refresh, or configuring API servers with live reload.

REJECTED

Format: openclawScanner: v0.8.0Duration: 16msScanned: 8d ago · May 31, 6:59 AMSource →

Open community →Automate with the API →Join the discussion →Jump to findings →

Embed this badge

[![AgentVerus](https://agentverus.ai/api/v1/skill/348cc92e-cd72-4185-9b8a-137229be3a67/badge)](https://agentverus.ai/skill/348cc92e-cd72-4185-9b8a-137229be3a67)

Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

Rescan this skill →Record an interaction →Open comments →Automate this report →

https://agentverus.ai/api/v1/skill/348cc92e-cd72-4185-9b8a-137229be3a67/trust

Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction

curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"348cc92e-cd72-4185-9b8a-137229be3a67","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'

Fetch trust JSON

curl https://agentverus.ai/api/v1/skill/348cc92e-cd72-4185-9b8a-137229be3a67/trust

Category Scores

Permissions

100

Injection

Dependencies

Behavioral

Content

Code Safety

Findings (15)

infoError handling instructions present

The skill includes error handling instructions for graceful failure.

Error handling patterns detected

→ Keep these error handling instructions.

contentASST-09

criticalEnvironment variable access + network send (credential harvesting)-20

Code accesses process.env and makes outbound network requests. This combination enables credential harvesting — reading API keys and tokens from the environment and exfiltrating them.

port: process.env.PORT || 3000,

→ Review the code for legitimate use. If this is instructional, consider adding a safety disclaimer.

code-safetyASST-05

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: bun init

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03

highFile read combined with network send (possible exfiltration)-15

Code reads files and makes outbound HTTP requests. When both patterns co-exist, data exfiltration is possible — reading sensitive files and sending them to an external server.

import { readFileSync } from 'fs';

→ Review the code for legitimate use. If this is instructional, consider adding a safety disclaimer.

code-safetyASST-02

mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Create `server.ts`

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03

mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: http://localhost:$

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04

mediumCapability contract mismatch: inferred local service access is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: http://localhost

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03

mediumCapability contract mismatch: inferred package bootstrap is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: package.json

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03

mediumExternal documentation dependency-8

The skill relies on external documentation, specs, or README content as part of its workflow, which introduces an additional remote dependency and trust boundary.

README.md

→ Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04

mediumPackage-managed project bootstrap dependency-8

The skill bootstraps a package-managed project structure, which adds supply-chain exposure through manifest files, build configuration, and package-manager workflows.

package.json

→ Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04

mediumHigh-risk workflow lacks explicit safety boundaries-15

The skill performs or enables higher-risk operations but does not define explicit safety boundaries describing what it must not do.

No safety boundary patterns found alongside high-risk capability language

→ Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09

mediumLocal service URL reference-8

The skill references a localhost or private-network service URL which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Local service URL reference

http://localhost:${server.port}`

→ Review localhost/private-network service references carefully. Local service URLs can expose internal apps, admin panels, or developer tooling to agent-driven workflows.

dependenciesASST-04

mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://api.example.com

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04

mediumLocal service access detected (inside code block)-5

Found local service access pattern: "http://localhost"

console.log(`🚀 Dev server running at http://localhost:${server.port}`);

→ Treat localhost and loopback services as privileged local attack surfaces. Require explicit approval, constrain reachable ports, and avoid combining local access with session reuse or tunneling.

behavioralASST-03

infoMany external URLs referenced (7)

The skill references 7 external URLs. While not inherently dangerous, many external dependencies increase the attack surface.

URLs: http://localhost:${server.port}`, http://localhost:3000/api, https://api.example.com, https://localhost:${server.port}`, http://localhost:8080${url.pathname}${url.search}`...

→ Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04