web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs numerous frontend development packages and build tools from the official NPM registry.
  • Evidence: scripts/init-artifact.sh and scripts/bundle-artifact.sh use pnpm and npm to fetch dependencies including Vite, Tailwind CSS, and various UI component libraries.
  • [COMMAND_EXECUTION]: Shell scripts are used to automate the configuration and build process for web projects.
  • Evidence: scripts/init-artifact.sh handles project scaffolding, configuration file generation (Tailwind, PostCSS, Vite), and dependency installation. scripts/bundle-artifact.sh manages the build and inlining process.
  • [REMOTE_CODE_EXECUTION]: The build process involves executing tools downloaded from the NPM registry.
  • Evidence: scripts/bundle-artifact.sh uses pnpm exec to run parcel and html-inline, which process and bundle the source code.
  • [PROMPT_INJECTION]: An indirect injection surface exists as the skill is designed to bundle user-generated or agent-generated source code into executable HTML artifacts.
  • Ingestion points: Source code files within the src/ directory of the initialized project (modified in scripts/init-artifact.sh).
  • Boundary markers: No specific boundary markers or instruction-ignoring warnings are implemented in the bundling scripts or templates.
  • Capability inventory: The skill has the capability to write and execute scripts via bash, pnpm, and node to produce the final bundle.html artifact.
  • Sanitization: No sanitization is performed on the source code before it is bundled and inlined into the single HTML output.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 07:31 AM