web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate project setup and bundling. These scripts perform standard development operations such as directory creation, file modification via sed, and running build commands like vite and parcel.
  • [EXTERNAL_DOWNLOADS]: The scripts install several dependencies from the npm registry using pnpm. This includes the global installation of pnpm itself if not present, and various frontend libraries (React, Tailwind CSS, Radix UI components, etc.) necessary for the artifact's construction.
  • [SAFE]: The skill's behavior is consistent with its stated purpose as a developer utility. No malicious patterns, such as data exfiltration or obfuscation, were identified. The use of standard package managers and build tools is typical for this category of software.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 10:00 PM
Security Audit — agent-trust-hub — web-artifacts-builder