artify
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as an HTML artifact tool. It provides a local server and CLI for previewing and interacting with user-authored HTML files.
- [COMMAND_EXECUTION]: The Python CLI uses
subprocess.Popenspecifically to launch the host's web browser in app/webview mode for the--webviewfeature. This is constrained to browser binaries found on the system path and target a local URL. - [EXTERNAL_DOWNLOADS]: A helper script
make-offline.pyis included which can fetch external resources from CDN URLs found within HTML files to inline them for offline use. This is a utility script that is not executed automatically and is intended for user-driven asset management. - [DATA_EXPOSURE]: The tool writes temporary instance information (port, PID, file path) to a subdirectory in the user's home folder (
~/.artify/instances/) for managing multiple running server instances. This is standard local state management for developer tooling.
Audit Metadata