web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides a legitimate development workflow for building UI components. All scripts align with the stated purpose of scaffolding and bundling React projects.
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to automate project setup, dependency management, and build processes. This includes the use ofnpm,pnpm,sed, andtarcommands. - [EXTERNAL_DOWNLOADS]: The skill installs numerous standard frontend development packages (React, Vite, Tailwind CSS, Radix UI) from the official npm registry (npmjs.com) to provide the necessary framework for artifact creation.
- [COMMAND_EXECUTION]: In
scripts/init-artifact.sh, the script attempts to ensure the presence of thepnpmpackage manager by runningnpm install -g pnpmif it is not found in the environment.
Audit Metadata