Is artifacts-builder safe?
Grade A, 92/100. No meaningful risk found.
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
Aartifacts-builder
artifacts-builder92/100 · No meaningful risk found1 medium1 low
artifacts-builder
artifacts-builderSuite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
- Content hash
- sha256:c7f924fc3ad20c91bc8fc90faad1faa5b5252e3509470ecbc4d69fc758aa0bb3
- Files
- 5
- Quality
- 100/100
Security findings
- mediumBundled archiveSL708 · artifacts-builder/scripts/shadcn-components.tar.gz:1
shadcn-components.tar.gzAn archive inside the skill hides its contents from review and from this scan. Fix: Commit the extracted files instead of the archive.
- lowUnpinned package installSL501 · artifacts-builder/scripts/init-artifact.sh:36
npm install -g pnpmInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).
Files in this skill
- LICENSE.txt11.1 KB
- SKILL.md3.0 KB
- scripts/bundle-artifact.sh1.5 KB
- scripts/init-artifact.sh9.7 KB
- scripts/shadcn-components.tar.gz19.5 KB
Questions about artifacts-builder
- Is artifacts-builder safe to install?
- Our scanner gave artifacts-builder grade A (92/100): no meaningful risk found. It matched 2 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install artifacts-builder in Claude Code or Codex?
- Run skillhash add github:ComposioHQ/awesome-claude-skills/artifacts-builder. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if artifacts-builder changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from ComposioHQ/awesome-claude-skills
- A
brand-guidelines
77kComposioHQ/awesome-claude-skills
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.
No security findings - A
canvas-design
77kComposioHQ/awesome-claude-skills
Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.
No security findings - A
changelog-generator
77kComposioHQ/awesome-claude-skills
Automatically creates user-facing changelogs from git commits by analyzing commit history, categorizing changes, and transforming technical commits into clear, customer-friendly release notes. Turns hours of manual changelog writing into minutes of automated generation.
No security findings - A
competitive-ads-extractor
77kComposioHQ/awesome-claude-skills
Extracts and analyzes competitors' ads from ad libraries (Facebook, LinkedIn, etc.) to understand what messaging, problems, and creative approaches are working. Helps inspire and improve your own ad campaigns.
No security findings - A
-21risk-automation
77kComposioHQ/awesome-claude-skills
Automate 21risk tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
-2chat-automation
77kComposioHQ/awesome-claude-skills
Automate 2chat tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
ably-automation
77kComposioHQ/awesome-claude-skills
Automate Ably tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
abyssale-automation
77kComposioHQ/awesome-claude-skills
Automate Abyssale tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings