iblai-vibe-agent-support
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an environment configuration template from the official ibl.ai GitHub repository using
curl(https://raw.githubusercontent.com/iblai/vibe/refs/heads/main/iblai.env). - [COMMAND_EXECUTION]: Includes instructions for standard package management and verification tasks using
pnpmandplaywrightfor testing and development. - [INDIRECT_PROMPT_INJECTION]: The skill processes and displays ticket content (HTML/Markdown) authored by agents or users.
- Ingestion points: Ticket subjects and bodies are rendered in the
AgentHumanSupportTabcomponent. - Boundary markers: No specific delimiters are used in the documentation for separating untrusted content from system instructions.
- Capability inventory: File system and network operations through
pnpmandplaywrightduring verification steps. - Sanitization: The skill instructions explicitly mention that HTML and Markdown content are rendered sanitized before being displayed in the ticket detail view.
Audit Metadata