artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npmandpnpmto download and install numerous standard frontend development packages from the official NPM registry, including Vite, Tailwind CSS, Parcel, and Radix UI components. - [COMMAND_EXECUTION]: The skill executes shell scripts (
init-artifact.shandbundle-artifact.sh) to automate project setup, configuration file generation, and the build process. These operations are restricted to the local project directory. - [DYNAMIC_EXECUTION]: The initialization script uses
node -eto programmatically updatetsconfig.jsonfiles with path aliases. This is a standard practice for configuring TypeScript projects. - [SAFE]: The skill interacts with well-known developer services and tools (NPM, GitHub/shadcn documentation). The extraction of
shadcn-components.tar.gzis a local operation to provide pre-packaged UI components.
Audit Metadata