artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell scripts to automate the project setup and bundling process.
  • The scripts/init-artifact.sh script performs environment checks, installs the pnpm package manager globally, and initializes a new Vite project.
  • The scripts use node -e to programmatically edit configuration files like tsconfig.json to add path aliases.
  • The scripts/bundle-artifact.sh script executes the Parcel build tool and the html-inline utility to process project files.
  • [EXTERNAL_DOWNLOADS]: The skill downloads a comprehensive suite of frontend libraries and development tools from the official NPM registry.
  • This includes well-known packages such as Vite, Tailwind CSS, Parcel, and various Radix UI primitive components.
  • These downloads are performed using standard package management commands (npm install, pnpm install).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 12:22 PM
Security Audit — agent-trust-hub — artifacts-builder