iblai-vibe-account
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration templates and project assets from the vendor's official repository at
github.com/iblai/vibeduring setup. - [COMMAND_EXECUTION]: The instructions guide the agent to perform various shell operations, including cloning repositories, installing Node.js dependencies with the
--ignore-scriptsflag, and executing automated UI tests using Playwright. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a data processing surface by creating a UI component that reads from local storage (
userData,tenants) and project environment variables (iblai.env). This is consistent with its primary purpose of providing an account management interface. - Ingestion points: Project configuration file (
iblai.env) and browser local storage keys (userData,tenants) are accessed inSKILL.mdand the generatedAccountPagecomponent. - Boundary markers: None present; the skill relies on standard Next.js and React data handling.
- Capability inventory: The skill performs file writes to create the page (
app/(app)/account/page.tsx) and executes development CLI tools (git,pnpm,npx). - Sanitization: The skill uses standard JSON parsing for local storage data and relies on template interpolation for configuration.
Audit Metadata