web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
init-artifact.shandbundle-artifact.shscripts automate the project lifecycle by executing shell commands such aspnpm create,pnpm install, andpnpm execto manage dependencies and build processes. - [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs a large number of standard packages from the NPM registry to facilitate the React and shadcn/ui development environment.
- [COMMAND_EXECUTION]: The initialization script attempts to install the
pnpmpackage manager globally vianpm install -g pnpmif it is not already available on the system. - [COMMAND_EXECUTION]: The setup process involves extracting a local archive file (
shadcn-components.tar.gz) to populate the project with UI components.
Audit Metadata