artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell scripts to automate project setup and asset bundling. These scripts perform routine tasks such as creating project structures, generating configuration files (Tailwind, PostCSS, Parcel), and managing the build process.
  • [EXTERNAL_DOWNLOADS]: Fetches well-known and verified frontend development packages (Vite, Parcel, Tailwind CSS, Radix UI components) from the official NPM registry to establish the artifact development environment.
  • [COMMAND_EXECUTION]: Installs the pnpm package manager globally using npm install -g if it is missing from the environment during the initialization phase.
  • [PROMPT_INJECTION]: The skill generates complex HTML artifacts that could incorporate untrusted user input, representing an indirect prompt injection surface.
  • Ingestion points: User instructions for artifact content are transformed into source code within the generated project directory.
  • Boundary markers: The bundling process lacks explicit delimiters to separate user content from instruction sets within the resulting HTML.
  • Capability inventory: The skill utilizes file system writes and subprocess execution via pnpm and node to build the final output (scripts/bundle-artifact.sh).
  • Sanitization: No specific sanitization or escaping mechanisms are applied to user input before it is bundled into the artifact.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 09:21 PM