artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill installs numerous standard frontend packages from the NPM registry (Vite, Tailwind, Radix UI, etc.). These are necessary for the development environment. Under the [TRUST-SCOPE-RULE], these downloads from the official registry are considered acceptable for a developer tool.
- [COMMAND_EXECUTION] (SAFE): The scripts perform extensive command-line operations including shell scripts, project initialization via Vite, and asset bundling via Parcel. These actions are the primary and intended purpose of the skill.
- [DYNAMIC_EXECUTION] (SAFE): The skill uses
node -efor inline JSON manipulation to configure TypeScript settings. This is a common and safe utility pattern for script-based automation. - [TRUSTED_SOURCE] (INFO): The skill is authored by Anthropic, which is a recognized trusted organization. This reinforces the safety of the development-oriented operations performed.
Audit Metadata