artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell scripts (init-artifact.sh and bundle-artifact.sh) to automate the creation and building of React projects. These scripts execute various system commands including pnpm, tar, sed, and node to manage files and dependencies.
- [EXTERNAL_DOWNLOADS]: The scripts trigger the download and installation of numerous frontend dependencies from the NPM registry, including build tools (Vite, Parcel), styling frameworks (Tailwind CSS), and UI libraries (Radix UI).
- [DYNAMIC_EXECUTION]: The init-artifact.sh script executes inline JavaScript via node -e to programmatically parse and update JSON configuration files (tsconfig.json, tsconfig.app.json).
- [PRIVILEGE_ESCALATION]: The initialization script attempts to perform a global installation of the pnpm package manager using npm install -g pnpm if it is not detected on the system, which modifies the system-wide environment.
- [INDIRECT_PROMPT_INJECTION]: The initialization script is vulnerable to injection via the project name argument (ingestion point in init-artifact.sh). Boundary markers are absent. Capability inventory includes sed, pnpm, and node. Sanitization is absent; the project name is interpolated directly into a sed command string, which could allow for the modification of generated file content if a malicious project name is provided.
Audit Metadata