artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
init-artifact.sh,bundle-artifact.sh) to manage the lifecycle of React projects. These scripts execute standard system and development utilities includingpnpm,node,sed, andtarto initialize projects and bundle assets. - [EXTERNAL_DOWNLOADS]: The scripts automate the installation of numerous standard frontend libraries and tools from the official NPM registry, such as Vite, Tailwind CSS, Parcel, and Radix UI components, to facilitate modern web development.
- [COMMAND_EXECUTION]: During initialization, the
init-artifact.shscript ensures the presence of thepnpmpackage manager by installing it globally vianpm install -g pnpmif it is not already available. - [DYNAMIC_EXECUTION]: The
init-artifact.shscript executes inline Node.js code (node -e) to dynamically modify configuration files liketsconfig.json, ensuring correct path mapping for the project.
Audit Metadata