bun-audit SKILL.md skillA
bun-audit from bjornmelin/dev-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add bjornmelin/dev-skills/bun-audit@git:20260720.59a58dePins git:20260720.59a58de in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- bjornmelin/dev-skills
- Path
archive/skills/bun-audit/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260720.59a58de, committed Jul 20, 2026
- Size
- 1,504 bytes
- Repository stars
- 8
- License
- none declared
Shared Bun audit/remediation router. Use when auditing a repo for Bun-first correctness, explaining findings, listing rules, planning safe fixes, applying low-risk remediations, or validating Bun-related changes.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Bun Audit Use this skill as a thin router over the native `codex-dev bun` engine. Do not duplicate rules or remediation logic here; `bun-dev` owns rule text and references. ## Commands - `audit`: run `codex-dev --json bun audit --root <repo>`. - `rules list`: run `codex-dev --json bun rules list`. - `rules show <rule-id>`: run `codex-dev --json bun rules show <rule-id>`. - `fixes plan`: run `codex-dev --json bun fixes plan --root <repo>`. - `fixes apply`: run `codex-dev --json bun fixes apply --root <repo>`. - `validate plan`: run `codex-dev --json bun validate plan --root <repo>`. - `validate run`: run `codex-dev --json bun validate run --root <repo> --fail-on warn`. - `benchmark`: run `codex-dev --json bun benchmark --root <repo>`. ## Operating Rules - Treat `bun-dev` as the source of truth for rules and reference snapshots. - Use `codex-dev bun ...`; it is the sole supported Bun audit and remediation CLI. - Do not run `fixes apply`, `validate run`, or `references sync` in parallel against the same repo or skill root. - Audit cache writes are opt-in with `--write-cache`. - Safe fixes write rollback artifacts under external dev-skills state. …
Read the whole file at its exact version.
How to install
mdr add bjornmelin/dev-skills/bun-audit@sha256:158ebbcd75a118e3The line at the top of this page pins the label git:20260720.59a58de, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hdlawcrctllbgwp6)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 20, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (1504 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
bjornmelin/dev-skills · 8 stars · license none declared · pushed 2026-10-15 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hdlawcrctllbgwp6 GET https://markdownregistry.com/api/v1/resolve?ref=bjornmelin/dev-skills/bun-audit GET https://markdownregistry.com/api/v1/blob/158ebbcd75a118e3919983878400df36d2878f53ef2e492a66990003c7db9cac
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.