web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
init-artifact.shandbundle-artifact.shscripts execute shell commands to manage project directories, configure development tools, and automate the build process. - [EXTERNAL_DOWNLOADS]: The scripts download numerous frontend dependencies and build tools from the public NPM registry using
pnpm, includingvite,parcel,tailwindcss, and various@radix-uicomponents. - [DYNAMIC_EXECUTION]: The skill generates React project files and configuration files at runtime, including the use of
node -escripts for dynamic JSON/JS modifications, and invokes build tools to compile source code into a single HTML artifact. - [PRIVILEGE_ESCALATION]: The initialization script attempts to install the
pnpmpackage manager globally usingnpm install -g pnpmif it is not detected in the environment. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect injection by bundling processed code into artifacts. 1. Ingestion points:
src/directory. 2. Boundary markers: Absent. 3. Capability inventory: Execution ofpnpm,parcel,html-inline, andtar. 4. Sanitization: Absent; the skill bundles source content as-is.
Audit Metadata