Artifacts Builder
PassAudited by ClawScan on May 10, 2026.
Overview
This is mostly a frontend artifact-building guide, but it references local helper scripts and dependency installs that are not included in the reviewed package.
This skill appears safe as documentation for building frontend artifacts, but do not run any missing or externally obtained helper scripts unless you can inspect and trust them. Use a clean workspace and review any package installation steps first.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The documented commands may fail, or a user may be tempted to obtain similarly named scripts from elsewhere without review.
The skill relies on helper scripts, but the supplied manifest contains only SKILL.md and no script files. That means the actual behavior of those scripts cannot be reviewed from the provided artifacts.
Run the initialization script to create a new React project: `bash scripts/init-artifact.sh <project-name>` ... `bash scripts/bundle-artifact.sh`
Only run scripts that are included from a trusted source and review their contents before execution.
Running the workflow could change project files and install npm packages in the working environment.
The skill describes local command execution and dependency installation. This is expected for a frontend build workflow, but it still modifies the local workspace and would download packages if the scripts existed.
What the script does: - Installs bundling dependencies (parcel, @parcel/config-default, parcel-resolver-tspaths, html-inline) - Creates `.parcelrc` config ... - Builds with Parcel
Run the skill in a dedicated project directory, review the install/build steps, and avoid executing unreviewed external scripts.