web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) to automate project setup and bundling. These scripts perform standard development operations such as directory creation, file modification viased, and running build commands likeviteandparcel. - [EXTERNAL_DOWNLOADS]: The scripts install several dependencies from the npm registry using
pnpm. This includes the global installation ofpnpmitself if not present, and various frontend libraries (React, Tailwind CSS, Radix UI components, etc.) necessary for the artifact's construction. - [SAFE]: The skill's behavior is consistent with its stated purpose as a developer utility. No malicious patterns, such as data exfiltration or obfuscation, were identified. The use of standard package managers and build tools is typical for this category of software.
Audit Metadata