web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
init-artifact.sh,bundle-artifact.sh) to automate the setup and build process of a React project. These scripts execute standard development commands such aspnpm install,pnpm build, andsedfor file manipulation. - [EXTERNAL_DOWNLOADS]: The skill downloads standard frontend development dependencies from the official NPM registry via
pnpm. These include well-known packages likevite,tailwindcss,react, and various@radix-uicomponents. These are standard industry dependencies. - [SAFE]: The project initialization script requires a local tarball (
shadcn-components.tar.gz) to be present in thescripts/directory to provide pre-configured UI components. This is a local file operation and does not involve remote code execution from untrusted URLs.
Audit Metadata