web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to manage the project lifecycle.
scripts/init-artifact.shusespnpm create viteto scaffold the project andsedto clean up the template.- The script uses
node -eto programmatically edittsconfig.jsonandtsconfig.app.jsonto configure path aliases. scripts/bundle-artifact.shexecutespnpm exec parcel buildandpnpm exec html-inlineto generate the final artifact.- [EXTERNAL_DOWNLOADS]: The initialization process retrieves numerous standard development dependencies from the npm registry.
- Fetches build tools and styling utilities including
vite,tailwindcss,postcss, andautoprefixer. - Downloads a comprehensive set of UI primitives from the
@radix-uiorganization and other well-known frontend libraries likelucide-react,sonner, andzod. - The script optionally installs the
pnpmpackage manager globally usingnpm install -g pnpmif it is not already present on the system. - [SAFE]: The skill's operations are transparent and consistent with its stated purpose as a frontend development toolkit. No attempts at data exfiltration, credential harvesting, or malicious prompt injection were observed.
Audit Metadata