web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash scripts (
init-artifact.shandbundle-artifact.sh) to automate project setup, dependency management, and code bundling. These scripts perform routine development tasks such as file system operations and configuration file generation (e.g.,.parcelrc,tailwind.config.js). - [COMMAND_EXECUTION]: The initialization script attempts to install
pnpmglobally usingnpm install -g pnpmif it is not already present, ensuring the necessary package manager is available for the build process. - [EXTERNAL_DOWNLOADS]: The skill automates the installation of numerous well-known, industry-standard frontend libraries from the npm registry, including React, Vite, Tailwind CSS, Radix UI, and Zod.
- [COMMAND_EXECUTION]: The setup script extracts UI component source files from a local archive (
shadcn-components.tar.gz) into the project directory to facilitate rapid artifact development.
Audit Metadata