web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to automate the creation and building of web projects. These scripts execute standard command-line tools includingpnpm,npm,node,sed, andtarto manage project files and configurations. - [EXTERNAL_DOWNLOADS]: The initialization and bundling processes involve downloading and installing numerous packages from the official npm registry. These include build tools (Vite, Parcel), styling utilities (Tailwind CSS), and UI component libraries (@radix-ui/*, shadcn/ui dependencies). These downloads are standard for modern web development workflows.
- [COMMAND_EXECUTION]: The
init-artifact.shscript includes logic to globally installpnpmvianpm install -g pnpmif it is not detected on the system, ensuring the necessary package manager is available for subsequent steps.
Audit Metadata