iblai-vibe-agent-audit
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download a configuration template and documentation from the author's official GitHub repository (
github.com/iblai/vibe). This is a standard practice for providing project boilerplate and is considered safe as it targets the vendor's own verified infrastructure.\n- [COMMAND_EXECUTION]: Instructions include standard shell commands for project setup, package management (pnpm), and integration testing (playwright). These commands are necessary for the skill's primary purpose of application development and verification.\n- [SAFE]: The analysis found no evidence of prompt injection, data exfiltration, or obfuscation. The skill appropriately handles permissions (RBAC) by rendering a 403 state for unauthorized users and provides clear guidance on environment variable management, emphasizing that sensitive variables should remain in.env.local.
Audit Metadata