artifacts-builder

SUSPICIOUS. The stated purpose is coherent for a frontend artifact builder, and the visible dependency set is mostly legitimate developer tooling. However, the skill’s core behavior is hidden inside unprovided local shell scripts, one dependency is a non-official third-party Parcel plugin, and the docs contain an upstream version inconsistency. This is not confirmed malware, but it carries medium supply-chain risk until the scripts are reviewed.