prototype
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a components tarball from Anthropic's official GitHub repository. Per [TRUST-SCOPE-RULE], downloads from this trusted organization are considered safe for development context.
- Evidence:
curl -L -o scripts/shadcn-components.tar.gz https://github.com/anthropics/skills/raw/main/skills/web-artifacts-builder/scripts/shadcn-components.tar.gzinSKILL.mdandscripts/init-artifact.sh. - [COMMAND_EXECUTION]: The skill uses standard shell scripts to automate project initialization, package installation via
pnpm, and bundling viaparcel. These operations are consistent with the skill's stated purpose of creating and building web prototypes. - Evidence: Use of
pnpm install,pnpm create vite, andparcel buildwithinscripts/init-artifact.shandscripts/bundle-artifact.sh.
Audit Metadata