web-artifacts-builder-v2

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell scripts (init-artifact.sh, bundle-artifact.sh) that perform project setup, file system modifications, and build processes. These scripts write configuration files (vite.config.ts, components.json), modify JSON files (tsconfig.json) using Node.js, and execute build commands. All operations are standard for a frontend development scaffolding tool.
  • [EXTERNAL_DOWNLOADS]: The initialization scripts download numerous well-known packages from the official NPM registry, including React, Vite, Tailwind CSS, and Radix UI components. These downloads target established, well-known services and are required for the skill's primary functionality.
  • [FILE_OPERATIONS]: The skill extracts a local archive (shadcn-components.tar.gz) containing pre-built UI components into the project's source directory. This is a local file operation intended to provide the necessary component library for artifact development.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 07:09 AM
Security Audit — agent-trust-hub — web-artifacts-builder-v2