Artifacts Builder
PendingStatic analysis audit pending.
Overview
No static analysis result has been recorded yet. Pattern checks will appear here once the artifact has been analyzed.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The documented commands may fail, or a user may be tempted to obtain similarly named scripts from elsewhere without review.
The skill relies on helper scripts, but the supplied manifest contains only SKILL.md and no script files. That means the actual behavior of those scripts cannot be reviewed from the provided artifacts.
Run the initialization script to create a new React project: `bash scripts/init-artifact.sh <project-name>` ... `bash scripts/bundle-artifact.sh`
Only run scripts that are included from a trusted source and review their contents before execution.
Running the workflow could change project files and install npm packages in the working environment.
The skill describes local command execution and dependency installation. This is expected for a frontend build workflow, but it still modifies the local workspace and would download packages if the scripts existed.
What the script does: - Installs bundling dependencies (parcel, @parcel/config-default, parcel-resolver-tspaths, html-inline) - Creates `.parcelrc` config ... - Builds with Parcel
Run the skill in a dedicated project directory, review the install/build steps, and avoid executing unreviewed external scripts.