web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Automates project setup and build tasks using shell scripts (
scripts/init-artifact.sh,scripts/bundle-artifact.sh) which perform file system operations and run CLI tools. - [EXTERNAL_DOWNLOADS]: Downloads and installs numerous dependencies from the NPM registry, including the Vite build tool, React libraries, and UI component frameworks.
- [COMMAND_EXECUTION]: Attempts to install the
pnpmpackage manager globally vianpm install -gif it is not found on the system, which modifies the global environment. - [COMMAND_EXECUTION]: Uses dynamic Node.js execution (
node -e) to programmatically update project configuration files liketsconfig.jsonduring initialization.
Audit Metadata