Mohamedghaly140/bun-first
.claude/skills/bun-first/SKILL.md
Describes efficient usage of Bun and Bun APIs instead of Node.js (and its APIs)
development
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add Mohamedghaly140/sg-shop-web bun-firstInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Error
VirusTotalMulti-engine malware detection
70%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 26, 2026, 6:35 PM45.6s1 file scanned
SKILL.md
- name:
- bun-first
- description:
- Describes efficient usage of Bun and Bun APIs instead of Node.js (and its APIs)
Bun-First Development
We default to Bun as our JavaScript runtime, package manager, and task runner. Assume Bun is available unless explicitly stated otherwise.
General Principles
- PREFER Bun over Node.js, npm, pnpm, or yarn
- PREFER Bun’s built-in features over third-party tools when available
- PRFER Bun's native APIs (eg for file access, SQL, S3 etc) over Node.js APIs
Package Management
- USE
bun install,bun add,bun remove - AVOID
npm,yarn,pnpm - Prefer Bun-native lockfiles and resolution behavior
- Keep dependencies minimal and intentional
Scripts & Tooling
- PREFER
bun runfor scripts - AVOID Bun’s built-in test runner (
bun test) => We'll useVitestfor testing - AVOID Bun’s build tool (
bun build) => We'll use Vite - Avoid introducing extra task runners unless required
Runtime & APIs
- PREFER Bun’s native APIs (fetch, fs, path, env handling)
- Write code assuming modern Web APIs are available in the runtime
- Avoid Node-specific APIs unless explicitly required
Performance & DX
- Prefer simple, explicit scripts over complex toolchains
- AVOID unnecessary abstractions
Related Skills
Mohamedghaly140/web-security
development
VerifiedTrustedCommunity
Enforce web security and avoid security vulnerabilities
SKILL.mdUpdated Apr 17, 2026
Mohamedghaly140/modern-tailwind
development
VerifiedTrustedCommunity
Build clean, scalable UIs with Tailwind CSS using modern utilities and variants
SKILL.mdUpdated Apr 17, 2026
Mohamedghaly140/use-modern-browser-apis
development
VerifiedTrustedCommunity
Utilize built-in browser APIs (like Popover API, View Transitions etc) instead of building features manually via JavaScript
SKILL.mdUpdated Apr 17, 2026
Mohamedghaly140/modern-best-practice-react-components
development
VerifiedTrustedCommunity
Build clean, modern React components that apply common best practices and avoid common pitfalls like unnecessary state management or useEffect usage
SKILL.mdUpdated Apr 17, 2026