artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on two shell scripts, scripts/init-artifact.sh and scripts/bundle-artifact.sh, to automate project setup and the bundling process.
  • [EXTERNAL_DOWNLOADS]: During initialization, the skill downloads numerous standard Node.js packages from the official npm registry, including Vite, Tailwind CSS, and various Radix UI primitives. It also ensures pnpm is installed globally if missing.
  • [COMMAND_EXECUTION]: The initialization script uses node -e to programmatically modify tsconfig.json files for path alias configuration, which is a safe and standard practice in development scripts.
  • [EXTERNAL_DOWNLOADS]: The bundling script dynamically installs parcel and html-inline as development dependencies to create a self-contained HTML artifact.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 03:12 PM