artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
init-artifact.sh,bundle-artifact.sh) that perform environment setup and build orchestration. These scripts use system tools likesedfor file editing,tarfor component extraction, andnodefor JSON manipulation. - [EXTERNAL_DOWNLOADS]: The scripts automate the installation of the
pnpmpackage manager and a wide range of frontend development dependencies from the official NPM registry. This includes React, Vite, Tailwind CSS, and various UI component libraries. - [REMOTE_CODE_EXECUTION]: The initialization and bundling processes involve downloading and executing code from the NPM registry via
pnpm createandpnpm install. This is the standard mechanism for bootstrapping and building modern JavaScript applications.
Audit Metadata