web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The initialization and bundling scripts (init-artifact.sh, bundle-artifact.sh) install numerous standard frontend dependencies from the official npm registry, including React ecosystem libraries, Radix UI components, Tailwind CSS, and the Parcel bundler.
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts to automate project scaffolding. This includes creating project directories, generating configuration files (PostCSS, Tailwind, Vite, and Parcel), and executing build commands via pnpm exec.
  • [COMMAND_EXECUTION]: The initialization script uses inline Node.js execution (node -e) to programmatically update project configuration files like tsconfig.json and tsconfig.app.json.
  • [COMMAND_EXECUTION]: The script attempts to globally install the pnpm package manager using npm install -g pnpm if it is not already available in the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 01:41 PM