iblai-vibe-agent-support
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a configuration template (
iblai.env) from the vendor's official GitHub repository usingcurl. This is a standard setup procedure for configuring the development environment. - [COMMAND_EXECUTION]: Instructions include standard development commands such as
pnpm build,pnpm dev, and the use ofnpx playwrightfor UI testing and verification. These commands are localized to the user's development environment. - [DATA_EXPOSURE]: The skill refers to environment variables like
TOKENwithin aniblai.envfile. These instructions guide the user on local secret management practices rather than exposing or exfiltrating credentials. - [INDIRECT_PROMPT_INJECTION]: The skill implements a support ticket interface that processes external user-generated content (ticket bodies and replies). The documentation explicitly notes that this content is rendered in a sanitized format to mitigate risks associated with processing untrusted markdown or HTML.
Audit Metadata