web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate the creation and building of web projects. These scripts execute standard command-line tools including pnpm, npm, node, sed, and tar to manage project files and configurations.
  • [EXTERNAL_DOWNLOADS]: The initialization and bundling processes involve downloading and installing numerous packages from the official npm registry. These include build tools (Vite, Parcel), styling utilities (Tailwind CSS), and UI component libraries (@radix-ui/*, shadcn/ui dependencies). These downloads are standard for modern web development workflows.
  • [COMMAND_EXECUTION]: The init-artifact.sh script includes logic to globally install pnpm via npm install -g pnpm if it is not detected on the system, ensuring the necessary package manager is available for subsequent steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:11 AM
Security Audit — agent-trust-hub — web-artifacts-builder