iblai-api-token
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage Platform API Tokens for the ibl.ai ecosystem. It facilitates token creation, rotation, and deletion through standard HTTP requests.
- [DATA_EXPOSURE_AND_EXFILTRATION]: All network operations are directed to the official vendor domain (
api.iblai.app). The skill utilizes environment variables (IBLAI_API_KEY,IBLAI_ORG,IBLAI_USERNAME) for authentication, which is a standard and recommended practice for managing secrets in agent environments. - [PRIVILEGE_ESCALATION]: While the skill manages RBAC (Role-Based Access Control) policies and groups, it explicitly documents that the server-side API enforces a 'no-escalation' policy. Users cannot grant tokens more authority than they themselves possess, which is a standard safety implementation.
- [COMMAND_EXECUTION]: The skill provides examples using
curlfor API interaction. These commands are standard for developer tools and interact only with the stated vendor infrastructure.
Audit Metadata