web-artifacts-builder

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/init-artifact.sh and scripts/bundle-artifact.sh scripts execute various shell commands to set up the environment, including pnpm install, sed for file modification, and tar for resource extraction.
  • [EXTERNAL_DOWNLOADS]: The skill uses pnpm and npm to download and install a large number of dependencies from the official public registries (NPM). This includes build tools (Vite, Parcel) and UI libraries (Radix UI, Lucide).
  • [COMMAND_EXECUTION]: The initialization script uses node -e to dynamically modify tsconfig.json and tsconfig.app.json. This is used for programmatic configuration management during the project setup phase.
  • [COMMAND_EXECUTION]: The initialization script attempts to globally install pnpm using npm install -g pnpm if it is not already present, which modifies the system's global package environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 11:15 PM