web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes multiple bash scripts (init-artifact.sh, bundle-artifact.sh) to automate the setup and build process of a React project. This includes project scaffolding via pnpm create vite, directory management, and asset bundling.
  • [DYNAMIC_EXECUTION]: During the initialization phase, the skill uses node -e to programmatically modify tsconfig.json and tsconfig.app.json to inject path aliases and other compiler options. It also generates configuration files like .parcelrc and tailwind.config.js using heredocs.
  • [EXTERNAL_DOWNLOADS]: The scripts trigger the download and installation of numerous standard frontend libraries and development tools from the NPM registry using pnpm. These include React, Tailwind CSS, Radix UI components, and the Parcel bundler. It also installs the pnpm package manager globally if it is not already present on the system.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:52 PM