iblai-vibe-agent-voice
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads environment templates and documentation from the vendor's official GitHub repository. These are legitimate resources for setting up the agent's voice capabilities.
- [INDIRECT_PROMPT_INJECTION]: The integration provides fields for voice instructions and renders markdown content, which creates a data ingestion surface. This is a functional requirement of the voice configuration tab and is managed by the vendor's SDK libraries.
- Ingestion points: Instructions for the voice agent and screen-sharing prompt content.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: SDK-managed network requests for configuration persistence and TTS synthesis.
- Sanitization: Uses react-markdown for UI rendering.
Audit Metadata