CtrlK
BlogDocsLog inGet started
Tessl Logo

bun-development

Complete Bun.js ecosystem guidance for runtime APIs, file I/O, package management, testing, SQLite, and security; use proactively when setting up Bun projects, replacing Node.js APIs with Bun-native APIs, writing bun test suites, implementing Bun.serve services, using bun:sqlite with prepared statements, configuring workspaces and lockfiles, hardening shell and SQL boundaries, or optimizing Bun performance and migration workflows.

74

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured hub-and-spoke skill: executable commands, BAD/GOOD examples, a workflow with real feedback loops, and a verified one-level-deep reference map. The only weaknesses are mild redundancy in the anti-pattern section and a GOOD example for shell safety that doesn't actually demonstrate a safe shell invocation.

Suggestions

In each anti-pattern, drop either the inline 'BAD: ... GOOD: ...' summary line or the code blocks — the duplicated pair doubles tokens without adding information.

Replace the shell-safety GOOD example with a genuine safe spawn (e.g., Bun.spawn(["grep", "-n", "pattern", fixedPath]) using an argument array without 'sh -c') so the fix matches the anti-pattern's own advice to use 'fixed command arguments'.

State the SQL prepared-statement requirement once — either in the workflow or in the Validate SQL Pattern command — instead of in both places plus the anti-pattern section.

DimensionReasoningScore

Conciseness

The body is lean — short command blocks with one-line expected outcomes, no concept tutorials — but each anti-pattern states its BAD/GOOD pair twice (an inline summary line followed by a code block restating it), and SQL validation guidance is repeated across the workflow and the Quick Commands section. Fits anchor 4 (minor trimming possible) rather than 5, and is clearly above anchor 3 since nothing explains concepts Claude already knows.

4 / 5

Actionability

Commands are executable ("bun install", "rg -n \"query\\(|prepare\\(\" src") and BAD/GOOD code blocks are copy-paste ready, covering file I/O, SQL injection, and package management. Not a 5 because the shell anti-pattern's GOOD example shows a file read ("const safePath = Bun.file(userProvidedPath)") instead of a genuinely safe spawn with fixed argument arrays, leaving a minor gap for the common "run a command safely" case.

4 / 5

Workflow Clarity

The 7-step workflow has explicit validation ("Validate behavior with tests or execution checks") and feedback loops for error recovery ("If bun install fails: check bun.lock/bun.lockb for merge conflicts... re-run", "revert the last change, confirm the error... before re-validating"), plus a hard gate on refactoring flagged raw SQL interpolations. Matches anchor 5; not a 4 because checkpoints are explicit rather than implicit.

5 / 5

Progressive Disclosure

The body acts as a navigation hub with a "Reference Map" grouping all 13 bundle files by category, and every referenced path (e.g., references/runtime-globals.md, references/sqlite-basics.md) was verified to exist on disk, one level deep. Not a 4 because references are clearly signaled, categorized, and complete with no detail content inlined that belongs in them.

5 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that pairs an explicit capability statement with a rich, specific "use proactively when" trigger list covering all six domains of the skill. Trigger terms are natural and include synonyms, and the Bun-specific framing keeps conflict risk minimal.

DimensionReasoningScore

Specificity

The description enumerates many concrete actions — "writing bun test suites", "implementing Bun.serve services", "using bun:sqlite with prepared statements", "configuring workspaces and lockfiles", "hardening shell and SQL boundaries" — giving comprehensive coverage of the skill's capabilities. Not a 4 because coverage spans all six claimed domains with specific API-level actions rather than leaving minor gaps.

5 / 5

Completeness

It explicitly answers "what" ("Complete Bun.js ecosystem guidance for runtime APIs, file I/O, package management, testing, SQLite, and security") and "when" with concrete trigger phrases ("use proactively when setting up Bun projects, replacing Node.js APIs..."). Not a 4 because both what and when are explicit and concrete, matching the anchor-5 example structure.

5 / 5

Trigger Term Quality

Natural trigger phrases users would actually say are covered with synonyms: "Bun projects", "Node.js", "bun test", "Bun.serve", "bun:sqlite", "prepared statements", "workspaces", "lockfiles", "migration". Not a 4 because keyword coverage includes both colloquial and API-level synonyms, leaving essentially no common variation missing.

5 / 5

Distinctiveness Conflict Risk

The Bun.js niche is clearly named and every trigger is Bun-specific, so risk of firing for the wrong skill is minimal. Not a 4 because even closely related skills (Node.js, package managers) are explicitly differentiated via the "replacing Node.js APIs" framing rather than overlapping.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

15

/

16

Passed

Repository
pantheon-org/tekhne
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.