web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • Standard Toolchain Initialization: The skill uses pnpm create vite and pnpm install to set up a standard React and Tailwind development environment. These operations involve downloading well-known packages from the public npm registry.
  • Global Package Management: The initialization script checks for pnpm and installs it globally via npm install -g pnpm if it is missing. This is a common practice for ensuring required tooling is available in the execution environment.
  • Automated Configuration Management: The scripts use sed and node -e to programmatically update configuration files like index.html and tsconfig.json. This automation is used for project scaffolding and does not involve processing untrusted input in a way that suggests command injection risks.
  • Artifact Bundling Process: The bundling script utilizes parcel and html-inline to create a self-contained HTML file. This process is local to the project directory and follows standard frontend build patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 11:53 AM