web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate the project lifecycle, including project scaffolding, dependency management, and asset bundling.
  • [EXTERNAL_DOWNLOADS]: The initialization and bundling scripts download numerous standard frontend development packages (such as React, Vite, Tailwind CSS, Parcel, and Radix UI components) from the official NPM registry via pnpm and npm.
  • [COMMAND_EXECUTION]: The initialization script attempts to install the pnpm package manager globally using npm install -g pnpm if it is not detected on the host system.
  • [COMMAND_EXECUTION]: The skill uses node -e (inline Node.js execution) to programmatically modify project configuration files like tsconfig.json during the setup phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 05:19 PM