Skills
skills/boshi-xixixi/agenticflow-skills/artifacts-builder/Gen Agent Trust Hub

artifacts-builder

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts init-artifact.sh and bundle-artifact.sh perform package installations via pnpm from the official npm registry. This includes standard development dependencies such as React, Vite, Tailwind CSS, Radix UI primitives, and the Parcel bundler. These are legitimate operations for a project builder tool.
  • [COMMAND_EXECUTION]: The initialization script checks for the presence of the pnpm package manager and installs it globally using npm install -g pnpm if it is missing. This is a standard procedure for ensuring the necessary build tools are available in the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 06:02 AM
Security Audit — agent-trust-hub — artifacts-builder