artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides a legitimate development environment for building frontend artifacts. All identified behaviors are consistent with its primary purpose as a build tool.
- [COMMAND_EXECUTION]: The skill uses shell scripts (
init-artifact.sh,bundle-artifact.sh) to automate project setup and the build process. These scripts execute standard development commands likepnpm,tar, andsedto scaffold and configure the workspace. - [EXTERNAL_DOWNLOADS]: The skill installs numerous well-known Node.js packages (e.g., Vite, Parcel, Tailwind CSS, Radix UI) from the official NPM registry. These dependencies are industry-standard for the React/Tailwind/shadcn/ui stack.
- [DYNAMIC_EXECUTION]: Uses
node -efor programmatic editing of configuration files (tsconfig.json,tsconfig.app.json) during the initialization phase, which is a common and safe practice for shell-based automation.
Audit Metadata