artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to manage the project lifecycle and automate repetitive development tasks.
- The
init-artifact.shscript automates the installation of thepnpmpackage manager globally if it is missing from the environment. - It utilizes CLI tools like
sedandnode -eto programmatically updateindex.htmlandtsconfig.jsonduring project setup. - The
bundle-artifact.shscript executesparcel buildandhtml-inlineto package the entire application into a single self-contained HTML file for distribution. - [EXTERNAL_DOWNLOADS]: The skill dynamically fetches numerous software dependencies from the official npm registry during project initialization and bundling.
- Installs well-known frontend libraries and frameworks including React 18, Vite, Tailwind CSS, and various Radix UI primitive components.
- Downloads development tools such as Parcel, PostCSS, and Autoprefixer to facilitate the build pipeline.
- These downloads are performed using standard package managers (npm and pnpm) targeting established technology vendors.
- [PROMPT_INJECTION]: The
SKILL.mdfile contains instructions regarding design quality and technical implementation. - Includes explicit guidelines to avoid common AI-generated design patterns ('AI slop'), which is a benign instructional use case for stylistic consistency.
- Does not contain any directives intended to bypass safety guardrails or manipulate the model's underlying system behavior.
Audit Metadata