iblai-api-agent-create

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill uses environment variables ($IBLAI_API_KEY, $IBLAI_ORG, $IBLAI_USERNAME) to manage authentication, which follows standard security practices for secret management.
  • [COMMAND_EXECUTION]: Includes Python scripts (quickstart.py and api.py) that facilitate network communication with the vendor's API endpoints at api.iblai.app, base.manager.iblai.app, and asgi.data.iblai.app. These operations are consistent with the skill's stated purpose of managing agents on the ibl.ai platform.
  • [EXTERNAL_DOWNLOADS]: References official vendor repositories on GitHub (github.com/iblai/quickstarts and github.com/iblai/standard) for supplementary developer resources and agent format specifications.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to set an agent's system prompt and description. While this involves processing user-supplied text that is sent to a remote API, it is the primary intended function of the configuration tool and utilizes standard JSON serialization for data boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:25 PM