web-artifacts-builder
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/init-artifact.shandscripts/bundle-artifact.shscripts execute various shell commands to set up the environment, includingpnpm install,sedfor file modification, andtarfor resource extraction. - [EXTERNAL_DOWNLOADS]: The skill uses
pnpmandnpmto download and install a large number of dependencies from the official public registries (NPM). This includes build tools (Vite, Parcel) and UI libraries (Radix UI, Lucide). - [COMMAND_EXECUTION]: The initialization script uses
node -eto dynamically modifytsconfig.jsonandtsconfig.app.json. This is used for programmatic configuration management during the project setup phase. - [COMMAND_EXECUTION]: The initialization script attempts to globally install
pnpmusingnpm install -g pnpmif it is not already present, which modifies the system's global package environment.
Audit Metadata