iblai-vibe-component
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration templates (
iblai.env) and brand guidelines (BRAND.md) from the vendor's official GitHub repository atgithub.com/iblai/vibe.\n- [COMMAND_EXECUTION]: The skill utilizes standard development tools includingpnpm,npm,git, and theshadcnCLI for project scaffolding, component installation, and maintenance tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill adapts its code generation by ingesting local project configuration files.\n - Ingestion points: Reads
components.json,app/globals.css,tailwind.config.ts, and other design-related files from the repository root to detect existing design systems (SKILL.md).\n - Boundary markers: None identified for processing these local project files.\n
- Capability inventory: Performs file writes,
git clone, andpnpm installcommands across various scripts.\n - Sanitization: The skill includes logic to prioritize existing project design tokens over brand defaults, which acts as a logical filter for visual styles.
Audit Metadata