artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • EXTERNAL_DOWNLOADS (SAFE): The skill installs numerous standard packages from the official NPM registry to provide development dependencies.
  • Evidence: Installation of vite, parcel, tailwindcss, and @radix-ui components.
  • COMMAND_EXECUTION (SAFE): The scripts init-artifact.sh and bundle-artifact.sh use standard shell utilities and build tools to manage the project lifecycle.
  • Evidence: Use of pnpm, npm, sed, tar, and node for project setup and bundling.
  • DYNAMIC_EXECUTION (SAFE): The skill generates configuration files and modifies JSON settings using hardcoded scripts.
  • Evidence: Creation of tailwind.config.js via cat-EOF and modification of tsconfig.json via node -e.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:11 PM