web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell scripts (init-artifact.sh and bundle-artifact.sh) to manage the project lifecycle. These scripts perform standard filesystem operations, including directory creation, configuration file generation (Tailwind, PostCSS, Vite, Parcel), and extracting a local component archive (shadcn-components.tar.gz).
  • [EXTERNAL_DOWNLOADS]: The scripts download and install numerous packages from the NPM registry. This includes build tooling like pnpm, vite, and parcel, as well as standard UI libraries such as @radix-ui/react-*, tailwindcss, and lucide-react.
  • [DYNAMIC_EXECUTION]: The initialization script uses node -e to execute inline JavaScript snippets for the purpose of programmatically modifying project configuration files like tsconfig.json and tsconfig.app.json.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:19 AM
Security Audit — agent-trust-hub — web-artifacts-builder