vibe-delegate
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
relay.mjsscript manages the implementation loop by executing thevibeCLI andgit. It also usestaskkillon Windows andprocess.killon Unix for process management. A secondary scriptlane.mjsmay be executed if the--laneflag is used, referencing a local file within the same vendor's skill set. - [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing
uv(Astral) andmistral-vibe(Mistral AI) via official channels. These are recognized tools from established organizations. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a proxy, passing user-generated task briefs to a downstream agent (
vibe). - Ingestion points: Briefs are ingested through the
--brieffile argument or via stdin inrelay.mjs. - Boundary markers: The
writing-the-brief.mdreference recommends using XML-style tags to delimit task components. - Capability inventory: The relay script can trigger file modifications and arbitrary command execution (when using
--full-access) via thevibeCLI. - Sanitization: No content-based sanitization is performed on the brief, though length limits are enforced for platform compatibility.
- [DATA_EXPOSURE]: The documentation explicitly warns that because the brief is passed to the CLI via a command-line argument, it remains visible in the host's process list. This is standard behavior for CLI tools, and the skill provides guidance to keep secrets out of the brief text.
Audit Metadata