web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's initialization script installs the
pnpmpackage manager globally usingnpm install -g pnpm. This is a common requirement for the project's dependency management.- [EXTERNAL_DOWNLOADS]: Theinit-artifact.shandbundle-artifact.shscripts download numerous standard frontend libraries and build tools (including Vite, Tailwind CSS, Radix UI components, and Parcel) from the official NPM registry. These are well-known, legitimate resources for web development.- [COMMAND_EXECUTION]: The skill utilizes shell scripts to automate project scaffolding, file system operations (liketarextraction of local assets), and the build process. These operations are consistent with the skill's stated purpose as a builder tool.- [COMMAND_EXECUTION]: The initialization script executes inlinenodecommands to programmatically update TypeScript configuration files (tsconfig.jsonandtsconfig.app.json), which is a standard method for managing project settings during initialization.
Audit Metadata