web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
scripts/init-artifact.shandscripts/bundle-artifact.sh) that perform environment setup and build processes. These scripts execute standard system commands such asbash,sed,tar, andnode -eto configure the project, extract UI components, and build the final application bundle. - [EXTERNAL_DOWNLOADS]: The scripts download numerous well-known development dependencies from the NPM registry. This includes frameworks and libraries such as
vite,tailwindcss,lucide-react, and a comprehensive set of Radix UI components. These downloads are necessary for the skill's primary function as a project generator and bundler. - [COMMAND_EXECUTION]: The initialization script ensures the presence of the
pnpmpackage manager by installing it globally vianpm install -g pnpmif it is not found on the system. While this modifies the global environment, it is consistent with the skill's purpose as a development tool.
Audit Metadata