web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The initialization and bundling scripts (
init-artifact.sh,bundle-artifact.sh) install numerous standard frontend dependencies from the official npm registry, including React ecosystem libraries, Radix UI components, Tailwind CSS, and the Parcel bundler. - [COMMAND_EXECUTION]: The skill utilizes shell scripts to automate project scaffolding. This includes creating project directories, generating configuration files (PostCSS, Tailwind, Vite, and Parcel), and executing build commands via
pnpm exec. - [COMMAND_EXECUTION]: The initialization script uses inline Node.js execution (
node -e) to programmatically update project configuration files liketsconfig.jsonandtsconfig.app.json. - [COMMAND_EXECUTION]: The script attempts to globally install the
pnpmpackage manager usingnpm install -g pnpmif it is not already available in the environment.
Audit Metadata