iblai-vibe-agent-access

SUSPICIOUS: the core purpose and capabilities are mostly aligned for an ibl.ai Next.js integration, and the install sources are largely same-org or mainstream. The main concerns are transitive skill execution, mutable raw GitHub content, and autonomous code/test/server actions; these raise security risk above benign but do not show clear malicious intent or credential harvesting.