web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs numerous frontend development packages and build tools from the official NPM registry.
- Evidence:
scripts/init-artifact.shandscripts/bundle-artifact.shusepnpmandnpmto fetch dependencies including Vite, Tailwind CSS, and various UI component libraries. - [COMMAND_EXECUTION]: Shell scripts are used to automate the configuration and build process for web projects.
- Evidence:
scripts/init-artifact.shhandles project scaffolding, configuration file generation (Tailwind, PostCSS, Vite), and dependency installation.scripts/bundle-artifact.shmanages the build and inlining process. - [REMOTE_CODE_EXECUTION]: The build process involves executing tools downloaded from the NPM registry.
- Evidence:
scripts/bundle-artifact.shusespnpm execto runparcelandhtml-inline, which process and bundle the source code. - [PROMPT_INJECTION]: An indirect injection surface exists as the skill is designed to bundle user-generated or agent-generated source code into executable HTML artifacts.
- Ingestion points: Source code files within the
src/directory of the initialized project (modified inscripts/init-artifact.sh). - Boundary markers: No specific boundary markers or instruction-ignoring warnings are implemented in the bundling scripts or templates.
- Capability inventory: The skill has the capability to write and execute scripts via
bash,pnpm, andnodeto produce the finalbundle.htmlartifact. - Sanitization: No sanitization is performed on the source code before it is bundled and inlined into the single HTML output.
Audit Metadata