web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes multiple bash scripts (
init-artifact.sh,bundle-artifact.sh) to automate the setup and build process of a React project. This includes project scaffolding viapnpm create vite, directory management, and asset bundling. - [DYNAMIC_EXECUTION]: During the initialization phase, the skill uses
node -eto programmatically modifytsconfig.jsonandtsconfig.app.jsonto inject path aliases and other compiler options. It also generates configuration files like.parcelrcandtailwind.config.jsusing heredocs. - [EXTERNAL_DOWNLOADS]: The scripts trigger the download and installation of numerous standard frontend libraries and development tools from the NPM registry using
pnpm. These include React, Tailwind CSS, Radix UI components, and the Parcel bundler. It also installs thepnpmpackage manager globally if it is not already present on the system.
Audit Metadata