How do I install the Bun bun audit skill?

Run npx skillmds@latest add jarle/bun-bun-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Bun bun audit skill do?

Check your installed packages for known security vulnerabilities It is listed under Security on SkillMD.

Is Bun bun audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Bun bun audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Bun bun audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Bun bun audit?

jarle (@jarle) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Bun bun audit by jarle — Agent Skill

Name: Bun bun audit
Rating: 4.666666666666667 (3 reviews)
Author: jarle

File contents

bun audit

Check your installed packages for known security vulnerabilities

Run the command in a project with a bun.lock file:

bun audit

Bun sends the list of installed packages and versions to NPM, and prints a report of any vulnerabilities that were found. Packages installed from registries other than the default registry are skipped.

If no vulnerabilities are found, the command prints:

No vulnerabilities found

When vulnerabilities are detected, each affected package is listed along with the severity, a short description and a link to the advisory. At the end of the report Bun prints a summary and hints for updating:

3 vulnerabilities (1 high, 2 moderate)
To update all dependencies to the latest compatible versions:
  bun update
To update all dependencies to the latest versions (including breaking changes):
  bun update --latest

Filtering options

--audit-level=<low|moderate|high|critical> - Only show vulnerabilities at this severity level or higher:

bun audit --audit-level=high

--prod - Audit only production dependencies (excludes devDependencies):

bun audit --prod

--ignore <CVE> - Ignore specific CVEs (can be used multiple times):

bun audit --ignore CVE-2022-25883 --ignore CVE-2023-26136

`--json`

Use the --json flag to print the raw JSON response from the registry instead of the formatted report:

bun audit --json

Exit code

bun audit will exit with code 0 if no vulnerabilities are found and 1 if the report lists any vulnerabilities. This will still happen even if --json is passed.

---name: bun-bun-auditdescription: Check your installed packages for known security vulnerabilities---# bun audit> Check your installed packages for known security vulnerabilitiesRun the command in a project with a `bun.lock` file:```bash terminal icon="terminal" theme={"theme":{"light":"github-light","dark":"dracula"}}bun audit```Bun sends the list of installed packages and versions to NPM, and prints a report of any vulnerabilities that were found. Packages installed from registries other than the default registry are skipped.If no vulnerabilities are found, the command prints:```No vulnerabilities found```When vulnerabilities are detected, each affected package is listed along with the severity, a short description and a link to the advisory. At the end of the report Bun prints a summary and hints for updating:```3 vulnerabilities (1 high, 2 moderate)To update all dependencies to the latest compatible versions: bun updateTo update all dependencies to the latest versions (including breaking changes): bun update --latest```### Filtering options**`--audit-level=<low|moderate|high|critical>`** - Only show vulnerabilities at this severity level or higher:```bash terminal icon="terminal" theme={"theme":{"light":"github-light","dark":"dracula"}}bun audit --audit-level=high```**`--prod`** - Audit only production dependencies (excludes devDependencies):```bash terminal icon="terminal" theme={"theme":{"light":"github-light","dark":"dracula"}}bun audit --prod```**`--ignore <CVE>`** - Ignore specific CVEs (can be used multiple times):```bash terminal icon="terminal" theme={"theme":{"light":"github-light","dark":"dracula"}}bun audit --ignore CVE-2022-25883 --ignore CVE-2023-26136```### `--json`Use the `--json` flag to print the raw JSON response from the registry instead of the formatted report:```bash terminal icon="terminal" theme={"theme":{"light":"github-light","dark":"dracula"}}bun audit --json```### Exit code`bun audit` will exit with code `0` if no vulnerabilities are found and `1` if the report lists any vulnerabilities. This will still happen even if `--json` is passed.

Frequently asked questions

Bun bun audit