web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill automates the creation and bundling of React applications using industry-standard tools (Vite, Parcel, Tailwind CSS). All shell scripts perform legitimate project setup and build tasks without suspicious behavior.
  • [COMMAND_EXECUTION]: The skill uses shell scripts (init-artifact.sh and bundle-artifact.sh) to manage the frontend lifecycle. These commands are localized to the created project directory and are standard for frontend development workflows.
  • [EXTERNAL_DOWNLOADS]: The skill installs necessary development dependencies via pnpm from the official registry (npmjs.org). These include well-known packages like vite, parcel, react, and @radix-ui components. These downloads are considered safe within the context of a development tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 12:58 AM