artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The execution logic relies heavily on standard local package managers (
pnpm,npm) to set up scaffolding parameters for building frontend components. - [COMMAND_EXECUTION]: Script workflows execute benign local environment routines such as standard Node evaluation commands (
node -e), environment setup checks (node -v), file creations (cat > ...), string adjustments (sed -i), and generic archive extraction workflows (tar -xzf). These do not implement high-risk variables or malicious command injections. - [EXTERNAL_DOWNLOADS]: Package resolutions are processed implicitly through public software ecosystems via standard tooling (e.g.,
pnpm install,pnpm add). There are no non-standard URL downloads or dangerous external executions.
Audit Metadata