web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
init-artifact.sh,bundle-artifact.sh) to automate project initialization and bundling tasks. These scripts execute standard development commands includingpnpm install,pnpm build,tarfor resource extraction, andsedfor file modification. - [EXTERNAL_DOWNLOADS]: The scripts download and install numerous packages and dev-tools from the official NPM registry and trigger project scaffolding through
pnpm create vite. - [DYNAMIC_EXECUTION]: The initialization script uses
node -eto programmatically update project configuration files (tsconfig.jsonandtsconfig.app.json) by parsing and rewriting their contents at runtime.
Audit Metadata