web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard package managers to set up the development environment and install necessary dependencies.
- Evidence: The script
scripts/init-artifact.shinstallspnpmglobally usingnpm install -g pnpmand creates a Vite project. - Evidence: The script
scripts/bundle-artifact.shusespnpmto installparceland other bundling utilities at runtime. - [DYNAMIC_EXECUTION]: The skill programmatically modifies configuration files during the project setup phase.
- Evidence:
scripts/init-artifact.shusesnode -eto read and rewritetsconfig.jsonandtsconfig.app.jsonto inject path aliases. - [SAFE]: All external dependencies (React, Vite, Tailwind, Radix UI, Parcel) are well-known, reputable packages from the official NPM registry. The bundling and inlining process is a standard technique for creating self-contained web artifacts.
Audit Metadata