📦 Bun Scripts - Bun脚本运行
v1.0.1使用 Bun 编写并运行 TypeScript 脚本,替代原生 Node.js 或 JavaScript —— 无需任何构建即可获得类型安全、内置工具和更快的执行速度。
1· 27·0 当前·0 累计
下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only helper that correctly documents and encourages using the Bun runtime for TypeScript scripts; its requirements and instructions are coherent with that purpose.
评估建议
This skill is coherent: it documents using the Bun runtime and does not request extra credentials or perform hidden installs. Before using it, ensure you have the official 'bun' binary from a trusted source. Be aware that scripts run via Bun can read and write files, spawn subprocesses, and access environment variables (including .env files that Bun auto-loads). Only run scripts you trust or run them in an isolated environment (container or sandbox) if you have sensitive secrets in your workspac...详细分析 ▾
✓ 用途与能力
Name and description match the content: the skill is about using Bun as a runtime and package manager. The only required binary is 'bun', which is exactly what this skill needs. There are no unrelated credentials, binaries, or install steps requested.
ℹ 指令范围
SKILL.md instructs the agent to read and write files, spawn processes, and run shell commands via Bun.$ and Bun.spawn — all expected for a scripting/runtime helper. The reference also documents that Bun auto-loads .env files and exposes Bun.env/process.env; while expected for Bun usage, this means scripts run under this skill can read environment variables and .env files in the working directory, which is sensitive behavior to be aware of.
✓ 安装机制
This is instruction-only with no install spec and no third-party downloads, so nothing is written to disk by the skill itself. Low installation risk.
ℹ 凭证需求
The skill declares no required environment variables (none are requested). However, its documentation explicitly shows how to access Bun.env, process.env, and that Bun auto-loads .env files — meaning runtime scripts may read local env secrets if they exist. The skill itself does not demand unrelated credentials, but users should expect scripts run under it can access environment values present in the execution environment.
✓ 持久化与权限
The skill is not marked always:true, does not request system-wide configuration changes, and is instruction-only. It does not attempt to persist or elevate privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/21
Add security constraints and declare bun binary requirement in metadata.
● 无害
安装命令
点击复制官方npx clawhub@latest install bun-scripts
镜像加速npx clawhub@latest install bun-scripts --registry https://cn.longxiaskill.com