iblai-api-notification

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to https://api.iblai.app to interact with the ibl.ai platform's notification service. These are legitimate API endpoints for the vendor's own infrastructure.
  • [CREDENTIALS_UNSAFE]: The skill uses placeholders such as $IBLAI_API_KEY, $IBLAI_ORG, and $IBLAI_USERNAME for authentication. It follows safe practices by instructing users to populate these environment variables via a login command rather than hardcoding actual secrets.
  • [COMMAND_EXECUTION]: Provides example curl commands to demonstrate how to use the API endpoints. These commands are benign and intended for documentation purposes.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration. The skill facilitates reading and sending notifications through the official vendor API, which is the stated purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 11:38 AM
Security Audit — agent-trust-hub — iblai-api-notification