iblai-vibe-agent-memory
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions direct the user to fetch an environment configuration template (
iblai.env) from the vendor's GitHub repository (github.com/iblai/vibe). This is a standard setup procedure for the vendor's platform. - [INDIRECT_PROMPT_INJECTION]: The skill defines a memory management interface that ingests and displays content from external API endpoints, representing a potential surface for indirect prompt injection.
- Ingestion points: Data is retrieved from endpoints such as
GET /global-memories/andGET /mentor-memories/and displayed within theAgentMemoryTabcomponent. - Boundary markers: The provided UI code does not explicitly define delimiters or instructions for the agent to ignore embedded commands within the memory content.
- Capability inventory: The skill allows for the creation, editing, and persistent storage of memories that directly influence future agent responses and behavior.
- Sanitization: The skill instructions do not specify input validation or sanitization routines for the memory content handled by the UI.
Audit Metadata