artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate project setup and bundling operations. These scripts execute standard system utilities including sed, tar, and cat, and invoke Node.js to programmatically modify configuration files like tsconfig.json.
- [EXTERNAL_DOWNLOADS]: The initialization and bundling processes download numerous standard development packages from the official NPM registry. This includes installing the pnpm package manager globally if not already present, and fetching dependencies such as vite, tailwindcss, parcel, and the @radix-ui component suite.
Audit Metadata