The Agent Skills Directory

EXTERNAL_DOWNLOADS (MEDIUM): The scripts init-artifact.sh and bundle-artifact.sh perform multiple pnpm install and pnpm add operations. While these are standard for a frontend build tool, they introduce a dependency on the npm registry and can pull in unverified third-party code at runtime.
COMMAND_EXECUTION (MEDIUM): The skill utilizes node -e to dynamically modify tsconfig.json and tsconfig.app.json. It also generates several configuration files (Tailwind, PostCSS, Vite) via shell redirections. These are legitimate build-time operations but involve runtime script generation and execution.
PRIVILEGE_ESCALATION (MEDIUM): The initialization script attempts to install pnpm globally using npm install -g pnpm. This modifies the global environment of the runner, which may be undesirable or restricted in certain execution environments.
DYNAMIC_EXECUTION (LOW): The skill uses pnpm exec to run build tools like parcel and html-inline. This is standard for the tool's stated purpose of bundling artifacts.

web-artifacts-builder