iblai-api-management
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill interacts with the vendor's own infrastructure (api.iblai.app and learn.iblai.app) to manage organizational data. It utilizes environment variables for authentication ($IBLAI_API_KEY), which is a standard practice for managing API tokens and does not represent a security risk.
- [COMMAND_EXECUTION]: The skill provides curl command examples to illustrate API usage. These are confined to the vendor's API and do not facilitate arbitrary command execution on the host system.
- [PROMPT_INJECTION]: The skill processes data from external API responses, creating a surface for indirect prompt injection. However, the instructions advise the agent to confirm destructive actions (like DELETE) with the user, mitigating potential automated impact. Mandatory Evidence Chain: (1) Ingestion points: GET endpoints for users, groups, and roles; (2) Boundary markers: Absent; (3) Capability inventory: API write operations (POST, PUT, DELETE); (4) Sanitization: Absent.
Audit Metadata