web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses bash scripts to automate the development lifecycle of web artifacts.
  • The init-artifact.sh script installs the pnpm package manager globally and executes project scaffolding commands.
  • It utilizes node -e for programmatic modification of JSON configuration files (tsconfig.json and tsconfig.app.json).
  • It uses sed and tar for file manipulation and resource extraction within the local project directory.
  • [EXTERNAL_DOWNLOADS]: The automation scripts download numerous dependencies from official package registries to set up the development environment.
  • Fetches the pnpm package manager and the Vite build tool from the NPM registry.
  • Installs a comprehensive list of NPM packages including React, Tailwind CSS, Radix UI, and other frontend utilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:37 AM
Security Audit — agent-trust-hub — web-artifacts-builder