web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell scripts (
init-artifact.shandbundle-artifact.sh) to manage the project lifecycle. These scripts perform standard filesystem operations, including directory creation, configuration file generation (Tailwind, PostCSS, Vite, Parcel), and extracting a local component archive (shadcn-components.tar.gz). - [EXTERNAL_DOWNLOADS]: The scripts download and install numerous packages from the NPM registry. This includes build tooling like
pnpm,vite, andparcel, as well as standard UI libraries such as@radix-ui/react-*,tailwindcss, andlucide-react. - [DYNAMIC_EXECUTION]: The initialization script uses
node -eto execute inline JavaScript snippets for the purpose of programmatically modifying project configuration files liketsconfig.jsonandtsconfig.app.json.
Audit Metadata