web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard package managers to set up the development environment and install necessary dependencies.
  • Evidence: The script scripts/init-artifact.sh installs pnpm globally using npm install -g pnpm and creates a Vite project.
  • Evidence: The script scripts/bundle-artifact.sh uses pnpm to install parcel and other bundling utilities at runtime.
  • [DYNAMIC_EXECUTION]: The skill programmatically modifies configuration files during the project setup phase.
  • Evidence: scripts/init-artifact.sh uses node -e to read and rewrite tsconfig.json and tsconfig.app.json to inject path aliases.
  • [SAFE]: All external dependencies (React, Vite, Tailwind, Radix UI, Parcel) are well-known, reputable packages from the official NPM registry. The bundling and inlining process is a standard technique for creating self-contained web artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:47 AM