iblai-api-invite
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
curlcommand-line tool to make HTTP requests to the vendor's API. These operations are used for legitimate data retrieval and submission related to user invitations. - [CREDENTIALS_UNSAFE]: Sensitive information, such as the API key, is managed through environment variables ($IBLAI_API_KEY). This avoids the risk of hardcoded credentials and adheres to secure development standards.
- [DATA_EXFILTRATION]: The skill transmits user invitation details (emails and names) to the domain
api.iblai.app. Since this domain belongs to the skill's author/vendor, this behavior is recognized as legitimate functionality for its stated purpose.
Audit Metadata