iblai-vibe-account
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration templates, starter project assets, and brand guidelines from the vendor's official GitHub repositories (
github.com/iblai/vibe). These references are directed to trusted, well-known infrastructure managed by the skill's author. - [COMMAND_EXECUTION]: Instructions are provided for standard development workflows, including
pnpm install,pnpm build, and verification vianpx playwright. The skill explicitly guides the agent to use the--ignore-scriptsflag during installation to mitigate the risk of executing untrusted post-install scripts from third-party packages. - [SAFE]: The skill's code handling of user data (
userDataandtenantsvialocalStorage) is consistent with the requirements for rendering a personalized UI. No signs of obfuscation, persistent access mechanisms, or unauthorized network exfiltration were identified.
Audit Metadata