web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to automate the project lifecycle, including project scaffolding and asset bundling using Parcel. - [PRIVILEGE_ESCALATION]: The initialization script
scripts/init-artifact.shattempts to modify the global system state by installing thepnpmpackage manager globally (npm install -g pnpm) if it is not already present. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to build artifacts from code that is generated or edited based on user instructions, creating a surface for executing untrusted scripts in the user's browser context.
- Ingestion points: User instructions for artifact features and the resulting generated React/TypeScript code as described in
SKILL.md. - Boundary markers: No specific boundary markers or 'ignore' instructions are used to delimit user-provided content from the build instructions.
- Capability inventory: Shell command execution (
scripts/bundle-artifact.sh), file system writes for project files, and network access for dependency resolution. - Sanitization: The bundling process does not perform sanitization or isolation of the input code before generating the final HTML artifact.
- [EXTERNAL_DOWNLOADS]: The skill uses standard package managers to fetch numerous frontend dependencies and tools (Vite, Parcel, Tailwind, etc.) from the official npm registry. These downloads target well-known and established services.
Audit Metadata