composio-artifacts
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx skills addto download the fullartifacts-builderimplementation from the ComposioHQ/awesome-claude-skills repository on GitHub. These are well-known repositories for AI agent extensions. - [COMMAND_EXECUTION]: The installation process involves executing shell commands to detect the environment and install dependencies. It specifically mentions running
npm install -g pnpmand other NPM-based installations to set up the Vite/React build environment. - [INDIRECT_PROMPT_INJECTION]: As a tool designed to build artifacts (UI components), it has an ingestion surface for processing design requirements and code snippets.
- Ingestion points: User instructions for artifact creation.
- Boundary markers: Not explicitly defined in this stub, but expected in the upstream implementation.
- Capability inventory: Shell execution (bash), file writing (Vite project scaffolding), and package management (npm/pnpm).
- Sanitization: Standard build tool isolation is used; no custom sanitization is noted in the stub.
Audit Metadata