Skills web-artifacts-builder

📦

web-artifacts-builder

Name: web-artifacts-builder
Author: davila7

Content revision r2 Medium Risk ⚙️ External commands⚡ Contains scripts🌐 Network access📁 Filesystem access

Build Complex React Web Artifacts

Complex interactive artifacts require more structure than a single HTML file. This skill scaffolds a React project and bundles it into shareable HTML.

Supports: Claude Codex Code(CC)

📊 67 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "web-artifacts-builder" from https://skillstore.io/skills/davila7-web-artifacts-builder.md and its manifest at https://skillstore.io/api/skills/davila7-web-artifacts-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/davila7-web-artifacts-builder.md Signed manifest GET /api/skills/davila7-web-artifacts-builder/manifest Signed lockfile GET /api/skills/davila7-web-artifacts-builder/lockfile

Test it

Using "web-artifacts-builder". Build an inventory dashboard with search, status filters, stock alerts, and item details.

Expected outcome:

A responsive React dashboard with searchable inventory, filter controls, stock indicators, a detail panel, and one shareable HTML file.

Using "web-artifacts-builder". Create a customer onboarding flow with validation and progress tracking.

Expected outcome:

A multi-step onboarding experience with field validation, progress states, responsive forms, completion feedback, and a bundled HTML artifact.

Using "web-artifacts-builder". Design a project planner with board and timeline views.

Expected outcome:

An interactive planner with switchable views, task details, filters, reusable controls, responsive layouts, and self-contained delivery.

Security Audit

Medium Risk

v10 • 7/23/2026 Open versioned report

All 29 static alerts are benign uses of shell syntax, local configuration writes, Markdown formatting, or documentation URLs. However, the scripts install unpinned packages, can modify the global npm environment, and delete build outputs without confirmation. These side effects require explicit user confirmation and clearer safeguards.

Files scanned

653

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Medium

scripts/init-artifact.sh:36 scripts/init-artifact.sh:59-80 scripts/init-artifact.sh:270-273 scripts/bundle-artifact.sh:19-21

Unpinned Third-Party Package Execution

The scripts fetch and execute packages without exact version pins, including Vite and bundling tools. Compromised releases or version drift could execute code during installation.

The package-manager commands are explicit, and most dependencies lack exact versions. npm and pnpm installations can run package lifecycle scripts.

Low

scripts/bundle-artifact.sh:34-36

Destructive Build Cleanup Without Confirmation

The bundling script recursively deletes existing dist and bundle.html before building. Running it in a valuable project can destroy prior output without confirmation.

The rm command explicitly and unconditionally deletes two fixed project paths after basic file checks. The scope is limited but data loss is possible.

Risk Factors

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/davila7-web-artifacts-builder/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/davila7-web-artifacts-builder/security.svg)](https://skillstore.io/skills/davila7-web-artifacts-builder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/davila7-web-artifacts-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/davila7-web-artifacts-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/davila7-web-artifacts-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

davila7. (2026). web-artifacts-builder security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/davila7-web-artifacts-builder/audits/10

BibTeX citation

@techreport{davila7-davila7-web-artifacts-builder-2026,
  author = {davila7},
  title = {web-artifacts-builder security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/davila7-web-artifacts-builder/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "web-artifacts-builder security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "davila7"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/davila7-web-artifacts-builder/audits/10"
identifiers:
  - type: other
    value: "skillstore:davila7-web-artifacts-builder:audit:10"
    description: "Skillstore immutable audit report identifier"

Compare variants

5 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

davila7 Recommended Current

davila7-web-artifacts-builder

Skillstore Score 67

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

Azeem-2

azeem-2-web-artifacts-builder

Skillstore Score 67

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

sickn33

sickn33-web-artifacts-builder

Skillstore Score 66

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

anthropics

web-artifacts-builder

Skillstore Score 50

Evidence Confidence High

Skillstore usage 45

Updated

2026-08-21

ZhanlinCui

zhanlincui-web-artifacts-builder

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 77

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prototype Interactive Dashboards

Create responsive dashboards with reusable controls, state management, and data views.

Present Product Workflows

Build polished, clickable interfaces for reviewing a product flow or feature concept.

Share Complex AI Artifacts

Package a multi-component React experience as one HTML file for an AI conversation.

Try These Prompts

Create a Starter Dashboard

Create a React dashboard for [domain] with [metrics], responsive navigation, accessible controls, and one bundled HTML deliverable.

Build an Interactive Workflow

Build a [workflow] artifact with multiple steps, validation, progress states, responsive layouts, and shadcn/ui controls.

Design a Data-Rich Tool

Create a [tool] with searchable tables, filters, detail views, charts, loading states, and realistic sample data.

Develop an Advanced Application

Develop a multi-view [application] with routing, shared state, responsive behavior, accessibility, error handling, and a self-contained HTML bundle.

Best Practices

Use this skill when the artifact needs multiple components, shared state, or routing.
Review package installation commands and confirm network access before running the scripts.
Test responsive behavior, accessibility, and the final bundle before sharing it.