artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts to manage the project lifecycle and automate repetitive development tasks.
  • The init-artifact.sh script automates the installation of the pnpm package manager globally if it is missing from the environment.
  • It utilizes CLI tools like sed and node -e to programmatically update index.html and tsconfig.json during project setup.
  • The bundle-artifact.sh script executes parcel build and html-inline to package the entire application into a single self-contained HTML file for distribution.
  • [EXTERNAL_DOWNLOADS]: The skill dynamically fetches numerous software dependencies from the official npm registry during project initialization and bundling.
  • Installs well-known frontend libraries and frameworks including React 18, Vite, Tailwind CSS, and various Radix UI primitive components.
  • Downloads development tools such as Parcel, PostCSS, and Autoprefixer to facilitate the build pipeline.
  • These downloads are performed using standard package managers (npm and pnpm) targeting established technology vendors.
  • [PROMPT_INJECTION]: The SKILL.md file contains instructions regarding design quality and technical implementation.
  • Includes explicit guidelines to avoid common AI-generated design patterns ('AI slop'), which is a benign instructional use case for stylistic consistency.
  • Does not contain any directives intended to bypass safety guardrails or manipulate the model's underlying system behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 03:19 AM
Security Audit — agent-trust-hub — artifacts-builder