iblai-vibe-agent-api
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exposes a potential attack surface where external data could influence the application interface.
- Ingestion points: The
labelsproperty in theAgentApiTabcomponent allows developers to provide custom strings for UI headers and text. - Boundary markers: No specific boundary delimiters or instructions to ignore embedded commands are included in the component props.
- Capability inventory: The environment utilizes shell commands for building (
pnpm build), testing (vitest), and browser automation (playwright). - Sanitization: The skill relies on React's standard rendering and does not document additional validation or sanitization for custom label content.
- [EXTERNAL_DOWNLOADS]: Fetches a configuration template (
iblai.env) and documentation (BRAND.md,skill-setup.md) from the author's official GitHub repository.
Audit Metadata