skills/iblai/vibe/iblai-landing/Gen Agent Trust Hub

iblai-landing

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads UI components and layout blocks from the shadcn registry and vendor-specific libraries using npx and pnpm. These operations target well-known and trusted package registries within the developer ecosystem.
  • [COMMAND_EXECUTION]: The agent is directed to perform various shell operations, including package installation, project builds, and starting development servers through pnpm, as well as executing a custom testing tool (/iblai-test).
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. Ingestion points: The agent is directed to analyze content from codebase files such as README.md and CLAUDE.md, and process responses provided by the user during the discovery phase. Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between its primary instructions and potentially adversarial content within the ingested files. Capability inventory: The skill possesses the ability to write new files to the filesystem and execute shell commands through npx and pnpm. Sanitization: There is no evidence of content validation, escaping, or filtering applied to the external data before it is interpolated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 06:55 PM