iblai-vibe-admin
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and interface assets from the official ibl.ai GitHub repository.
- Evidence: Fetches setup guides and UI preview images from
raw.githubusercontent.com/iblai/vibe/. - [INDIRECT_PROMPT_INJECTION]: The implementation of administrative management surfaces creates a potential vector for indirect prompt injection if an agent interacts with user-supplied content within these views.
- Ingestion points: The
AccountPanelcomponent inassets/account-panel.tsx.j2ingests user data fromlocalStorage("userData") and displays organization information through the vendor SDK. - Boundary markers: The skill relies on standard React component boundaries but lacks explicit instructions for the agent to disregard embedded content within these UI components.
- Capability inventory: The skill enables high-privilege administrative actions including user invitations, role management, and organization metadata updates via
@iblai/iblai-jsinassets/admin-users-page.tsx.j2. - Sanitization: Relies on standard React output escaping and internal validation within the vendor-provided SDK components.
Audit Metadata