artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to perform project setup and asset bundling. - [EXTERNAL_DOWNLOADS]: The bundling script installs common development packages from the npm registry, including
parcel,@parcel/config-default,parcel-resolver-tspaths, andhtml-inline. - [COMMAND_EXECUTION]: The initialization command accepts a
<project-name>parameter, which is interpolated into a shell command, potentially allowing for command injection if the input is malicious.
Audit Metadata