web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
init-artifact.sh,bundle-artifact.sh) that perform file system management, create configuration files (Tailwind, PostCSS, Parcel), and execute build processes. These actions are within the expected scope of a development tool. - [EXTERNAL_DOWNLOADS]: The initialization scripts use
pnpmandnpmto fetch numerous standard development dependencies and scaffolding templates from the public NPM registry. - [REMOTE_CODE_EXECUTION]: The skill executes remote scaffolding logic via
pnpm create viteand uses inline Node.js scripts (node -e) to programmatically update local configuration files such astsconfig.json. These operations are used for legitimate project configuration.
Audit Metadata