web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's initialization script installs the pnpm package manager globally using npm install -g pnpm. This is a common requirement for the project's dependency management.- [EXTERNAL_DOWNLOADS]: The init-artifact.sh and bundle-artifact.sh scripts download numerous standard frontend libraries and build tools (including Vite, Tailwind CSS, Radix UI components, and Parcel) from the official NPM registry. These are well-known, legitimate resources for web development.- [COMMAND_EXECUTION]: The skill utilizes shell scripts to automate project scaffolding, file system operations (like tar extraction of local assets), and the build process. These operations are consistent with the skill's stated purpose as a builder tool.- [COMMAND_EXECUTION]: The initialization script executes inline node commands to programmatically update TypeScript configuration files (tsconfig.json and tsconfig.app.json), which is a standard method for managing project settings during initialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 10:29 PM
Security Audit — agent-trust-hub — web-artifacts-builder