iblai-vibe-auth
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches project templates and environment configuration from the vendor's official GitHub repository (github.com/iblai).
- [COMMAND_EXECUTION]: Uses curl to interact with the vendor's API (api.iblai.app) for metadata retrieval and image asset uploads using user-supplied tokens.
- [INDIRECT_PROMPT_INJECTION]: Processes configuration data from the local iblai.env file to parameterize authentication files and API requests.
- Ingestion points: iblai.env in the project root.
- Boundary markers: Absent; relies on structured variable reading for specific keys.
- Capability inventory: curl (network/metadata/upload), git clone (external downloads), pnpm add (package installation).
- Sanitization: Absent; the skill directs the agent to read specific keys (PLATFORM, DOMAIN, TOKEN) from the environment file without explicit validation logic.
Audit Metadata