artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The initialization script (scripts/init-artifact.sh) manages the project lifecycle by creating directories, configuring TypeScript/Tailwind, and extracting local UI components from a tarball archive.
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs a standard suite of frontend development dependencies from the NPM registry. This includes frameworks like React and Vite, styling tools like Tailwind CSS, and UI component libraries from the Radix UI and shadcn/ui ecosystems.
  • [COMMAND_EXECUTION]: The build script (scripts/bundle-artifact.sh) utilizes Parcel and html-inline to compile and inline assets into a single HTML file, facilitating the creation of self-contained artifacts.
  • [COMMAND_EXECUTION]: The skill attempts to install the pnpm package manager globally via npm install -g pnpm if it is not already present on the system to ensure consistent dependency management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:10 PM
Security Audit — agent-trust-hub — artifacts-builder