artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: The skill provides a legitimate development environment for building frontend artifacts. All identified behaviors are consistent with its primary purpose as a build tool.
  • [COMMAND_EXECUTION]: The skill uses shell scripts (init-artifact.sh, bundle-artifact.sh) to automate project setup and the build process. These scripts execute standard development commands like pnpm, tar, and sed to scaffold and configure the workspace.
  • [EXTERNAL_DOWNLOADS]: The skill installs numerous well-known Node.js packages (e.g., Vite, Parcel, Tailwind CSS, Radix UI) from the official NPM registry. These dependencies are industry-standard for the React/Tailwind/shadcn/ui stack.
  • [DYNAMIC_EXECUTION]: Uses node -e for programmatic editing of configuration files (tsconfig.json, tsconfig.app.json) during the initialization phase, which is a common and safe practice for shell-based automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:14 PM