The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/init-artifact.sh script accepts a project name as a command-line argument which is subsequently used in shell commands and sed operations without sanitization.
Evidence: The script uses $PROJECT_NAME directly in echo commands and sed patterns (e.g., $SED_INPLACE 's/<title>.*<\/title>/<title>'"$PROJECT_NAME"'<\/title>/' index.html), creating a vulnerability to shell injection or file corruption.
[PRIVILEGE_ESCALATION]: The initialization script attempts to perform a global installation of the pnpm package manager.
Evidence: scripts/init-artifact.sh executes npm install -g pnpm, which modifies the global environment and may require administrative privileges.
[DYNAMIC_EXECUTION]: The skill uses runtime JavaScript execution to modify configuration files.
Evidence: scripts/init-artifact.sh contains node -e blocks that programmatically rewrite tsconfig.json and tsconfig.app.json based on hardcoded strings.
[EXTERNAL_DOWNLOADS]: The skill downloads and installs numerous packages from the NPM registry.
Evidence: scripts/init-artifact.sh and scripts/bundle-artifact.sh invoke pnpm install, pnpm add, and pnpm create vite to fetch dependencies at runtime.
[REMOTE_CODE_EXECUTION]: The skill executes external scripts and package binaries downloaded during the setup phase.
Evidence: Commands like pnpm create vite and pnpm exec parcel execute code fetched from external sources.
[INDIRECT_PROMPT_INJECTION]: The skill processes and bundles code intended for display as an artifact, creating an injection surface.
Ingestion points: The skill processes user-developed source files in the project root and src/ directory (e.g., index.html).
Boundary markers: Absent. The skill does not implement delimiters or warnings for embedded instructions in the generated artifacts.
Capability inventory: The skill utilizes parcel build and html-inline to process and aggregate file contents into a single executable HTML artifact.
Sanitization: Absent. The bundling process in scripts/bundle-artifact.sh does not include sanitization or validation of the input source code before inlining.

web-artifacts-builder