iblai-api-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the official IBL AI API at
api.iblai.app. As this is the core service provider for the skill's stated purpose, these network operations are considered safe. - [COMMAND_EXECUTION]: The documentation provides an example
curlcommand for developers to test API connectivity. This is a standard documentation practice and does not represent arbitrary or hidden command execution. - [DATA_EXF_ILTRATION]: While the skill manages sensitive user data (enrollments, skills, roles), all data transfers are directed to the official IBL AI API endpoints (
https://api.iblai.app/dm/api/catalog/*) using standard authentication headers. No unauthorized exfiltration paths were detected. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to use an environment variable (
$IBLAI_API_KEY) for authentication rather than hardcoding sensitive tokens, adhering to security best practices.
Audit Metadata