iblai-llm-tab

SUSPICIOUS. The skill's purpose and capabilities are broadly aligned with adding an ibl.ai UI tab to a Next.js app, and data flows stay mostly local. The main issue is install trust: the CLI upgrade commands reference package names that are inconsistent with the official naming evidence, so the external tool provenance is not fully verifiable. This is not confirmed malicious, but the mismatched CLI distribution details and reliance on external tooling make it medium risk.