artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts (init-artifact.sh, bundle-artifact.sh) to manage the lifecycle of React projects. These scripts execute standard system and development utilities including pnpm, node, sed, and tar to initialize projects and bundle assets.
  • [EXTERNAL_DOWNLOADS]: The scripts automate the installation of numerous standard frontend libraries and tools from the official NPM registry, such as Vite, Tailwind CSS, Parcel, and Radix UI components, to facilitate modern web development.
  • [COMMAND_EXECUTION]: During initialization, the init-artifact.sh script ensures the presence of the pnpm package manager by installing it globally via npm install -g pnpm if it is not already available.
  • [DYNAMIC_EXECUTION]: The init-artifact.sh script executes inline Node.js code (node -e) to dynamically modify configuration files like tsconfig.json, ensuring correct path mapping for the project.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 12:05 PM