web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
init-artifact.shandbundle-artifact.sh) to automate project initialization, asset building, and file bundling. - [EXTERNAL_DOWNLOADS]: The scripts facilitate the installation of numerous packages from the NPM registry, including the Vite build tool, Tailwind CSS, and various UI component libraries. It also includes a global installation of the pnpm package manager.
- [DYNAMIC_EXECUTION]: The initialization script utilizes Node.js string execution (
node -e) to programmatically update project configuration files liketsconfig.jsonduring the setup phase.
Audit Metadata