artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npm and pnpm to download and install numerous standard frontend development packages from the official NPM registry, including Vite, Tailwind CSS, Parcel, and Radix UI components.
  • [COMMAND_EXECUTION]: The skill executes shell scripts (init-artifact.sh and bundle-artifact.sh) to automate project setup, configuration file generation, and the build process. These operations are restricted to the local project directory.
  • [DYNAMIC_EXECUTION]: The initialization script uses node -e to programmatically update tsconfig.json files with path aliases. This is a standard practice for configuring TypeScript projects.
  • [SAFE]: The skill interacts with well-known developer services and tools (NPM, GitHub/shadcn documentation). The extraction of shadcn-components.tar.gz is a local operation to provide pre-packaged UI components.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:15 AM