web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate project setup, using standard CLI tools such as sed for file modification and tar for component extraction.
  • [COMMAND_EXECUTION]: Project configuration files, specifically tsconfig.json and tsconfig.app.json, are updated programmatically via node -e commands to configure path aliases for the React project.
  • [EXTERNAL_DOWNLOADS]: The scripts facilitate the download and installation of numerous industry-standard frontend development packages from the NPM registry, including the Vite build tool, Tailwind CSS, and Radix UI primitives.
  • [EXTERNAL_DOWNLOADS]: The project initialization script performs a global installation of the pnpm package manager if it is not already present on the host system to ensure consistent dependency management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 10:01 PM
Security Audit — agent-trust-hub — web-artifacts-builder