web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs numerous widely-recognized frontend libraries and build tools from the NPM registry, including Vite, Tailwind CSS, Radix UI, and Parcel.
- [COMMAND_EXECUTION]: The init-artifact.sh script installs the pnpm package manager globally via npm install -g pnpm if it is not already available.
- [COMMAND_EXECUTION]: The initialization process involves executing shell commands to modify configuration files (tsconfig.json, package.json) and extracting a local component archive (shadcn-components.tar.gz).
- [COMMAND_EXECUTION]: The bundling process uses Parcel and html-inline to transform the development project into a single-file distribution.
Audit Metadata