composio-artifacts

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx skills add to download the full artifacts-builder implementation from the ComposioHQ/awesome-claude-skills repository on GitHub. These are well-known repositories for AI agent extensions.
  • [COMMAND_EXECUTION]: The installation process involves executing shell commands to detect the environment and install dependencies. It specifically mentions running npm install -g pnpm and other NPM-based installations to set up the Vite/React build environment.
  • [INDIRECT_PROMPT_INJECTION]: As a tool designed to build artifacts (UI components), it has an ingestion surface for processing design requirements and code snippets.
  • Ingestion points: User instructions for artifact creation.
  • Boundary markers: Not explicitly defined in this stub, but expected in the upstream implementation.
  • Capability inventory: Shell execution (bash), file writing (Vite project scaffolding), and package management (npm/pnpm).
  • Sanitization: Standard build tool isolation is used; no custom sanitization is noted in the stub.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 09:34 PM