web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides a legitimate development workflow for building UI components. All scripts align with the stated purpose of scaffolding and bundling React projects.
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate project setup, dependency management, and build processes. This includes the use of npm, pnpm, sed, and tar commands.
  • [EXTERNAL_DOWNLOADS]: The skill installs numerous standard frontend development packages (React, Vite, Tailwind CSS, Radix UI) from the official npm registry (npmjs.com) to provide the necessary framework for artifact creation.
  • [COMMAND_EXECUTION]: In scripts/init-artifact.sh, the script attempts to ensure the presence of the pnpm package manager by running npm install -g pnpm if it is not found in the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 06:11 PM
Security Audit — agent-trust-hub — web-artifacts-builder