web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- Standard Toolchain Initialization: The skill uses
pnpm create viteandpnpm installto set up a standard React and Tailwind development environment. These operations involve downloading well-known packages from the public npm registry. - Global Package Management: The initialization script checks for
pnpmand installs it globally vianpm install -g pnpmif it is missing. This is a common practice for ensuring required tooling is available in the execution environment. - Automated Configuration Management: The scripts use
sedandnode -eto programmatically update configuration files likeindex.htmlandtsconfig.json. This automation is used for project scaffolding and does not involve processing untrusted input in a way that suggests command injection risks. - Artifact Bundling Process: The bundling script utilizes
parcelandhtml-inlineto create a self-contained HTML file. This process is local to the project directory and follows standard frontend build patterns.
Audit Metadata