iblai-vibe-credit
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the integration of the
<CreditBalance>component from the official@iblai/iblai-jsSDK. All external resources, including documentation images and package imports, originate from the authorized vendor (iblai) infrastructure. - [COMMAND_EXECUTION]: The skill provides instructions for a manual build verification step using shell commands (
rm -rf .next && pnpm buildandgrep). These are standard development operations intended for the developer to verify that Tailwind CSS is correctly scanning the SDK source files for utility classes. - [DATA_EXPOSURE]: The component consumes user data such as
currentUserEmailandusernamefromlocalStorageto facilitate billing flows via Stripe. This is the intended and documented functionality of the billing widget and does not constitute unauthorized exfiltration. - [INDIRECT_PROMPT_INJECTION]: While the skill defines a surface for processing application state (tenant data and user profiles), this is a standard frontend component integration. There is no automated processing of untrusted natural language data that could lead to prompt injection in this context.
Audit Metadata