web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to automate the project lifecycle, including project scaffolding, dependency management, and asset bundling. - [EXTERNAL_DOWNLOADS]: The initialization and bundling scripts download numerous standard frontend development packages (such as React, Vite, Tailwind CSS, Parcel, and Radix UI components) from the official NPM registry via
pnpmandnpm. - [COMMAND_EXECUTION]: The initialization script attempts to install the
pnpmpackage manager globally usingnpm install -g pnpmif it is not detected on the host system. - [COMMAND_EXECUTION]: The skill uses
node -e(inline Node.js execution) to programmatically modify project configuration files liketsconfig.jsonduring the setup phase.
Audit Metadata