web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The init-artifact.sh and bundle-artifact.sh scripts automate the project lifecycle by executing shell commands such as pnpm create, pnpm install, and pnpm exec to manage dependencies and build processes.
  • [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs a large number of standard packages from the NPM registry to facilitate the React and shadcn/ui development environment.
  • [COMMAND_EXECUTION]: The initialization script attempts to install the pnpm package manager globally via npm install -g pnpm if it is not already available on the system.
  • [COMMAND_EXECUTION]: The setup process involves extracting a local archive file (shadcn-components.tar.gz) to populate the project with UI components.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 04:54 PM