Skills
skills/minimax-ai/mini-agent/artifacts-builder/Gen Agent Trust Hub

artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on shell scripts (scripts/init-artifact.sh and scripts/bundle-artifact.sh) to automate project scaffolding, environment configuration, and asset bundling.
  • [EXTERNAL_DOWNLOADS]: Both scripts use npm and pnpm to download a wide range of standard, well-known frontend development packages from the public NPM registry, including Vite, Tailwind CSS, and Radix UI libraries.
  • [COMMAND_EXECUTION]: The init-artifact.sh script executes inline Node.js code (node -e) to programmatically update project configuration files like tsconfig.json during the setup process.
  • [COMMAND_EXECUTION]: The initialization script extracts a local tarball archive (shadcn-components.tar.gz) to prepopulate the project with UI components.
  • [COMMAND_EXECUTION]: scripts/init-artifact.sh includes a check for the pnpm package manager and attempts to install it globally using npm install -g pnpm if it is not present.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 03:03 AM