static-web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to create offline-capable, self-contained HTML artifacts. Its core logic is implemented through local shell scripts that do not perform network operations or access sensitive system files.
- [SAFE]: The initialization script (
scripts/init-artifact.sh) and bundling script (scripts/bundle-artifact.sh) use standard shell commands (mkdir, cat, grep, cp) with properly quoted variables to handle user-provided project names safely. - [SAFE]: The validation logic in
scripts/bundle-artifact.shactively discourages the use of external resources by checking for and warning about the presence of remote CSS, JS, images, and fonts. - [SAFE]: No patterns associated with prompt injection, obfuscation, data exfiltration, or persistence were found in the instructions or accompanying scripts.
Audit Metadata