web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to initialize the React project and bundle the final artifact. The initialization script takes a <project-name> argument, which is a point where user-provided input is passed to a shell command.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes several Node.js packages during the build and development process, including parcel, @parcel/config-default, parcel-resolver-tspaths, and html-inline. These dependencies are fetched from standard registries as part of the intended development lifecycle. The documentation also references installation via npx from the official Anthropic skills repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 09:37 AM
Security Audit — agent-trust-hub — web-artifacts-builder