artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on two shell scripts,
scripts/init-artifact.shandscripts/bundle-artifact.sh, to automate project setup and the bundling process. - [EXTERNAL_DOWNLOADS]: During initialization, the skill downloads numerous standard Node.js packages from the official npm registry, including Vite, Tailwind CSS, and various Radix UI primitives. It also ensures
pnpmis installed globally if missing. - [COMMAND_EXECUTION]: The initialization script uses
node -eto programmatically modifytsconfig.jsonfiles for path alias configuration, which is a safe and standard practice in development scripts. - [EXTERNAL_DOWNLOADS]: The bundling script dynamically installs
parcelandhtml-inlineas development dependencies to create a self-contained HTML artifact.
Audit Metadata