iblai-vibe-design
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses internal scripts that invoke
execSync,execFileSync, andspawnto manage a local development server, perform file operations like wrapping elements for variant testing, and reporting status to the agent. - [EXTERNAL_DOWNLOADS]: Fetches design system configuration from the author's own GitHub repository (iblai/vibe).
- [OBFUSCATION]: Uses base64 encoding within
live-inject.mjsto store original Content Security Policy (CSP) values in HTML attributes. This is used as a functional mechanism to ensure exact restoration of user files when the live design mode is deactivated. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads project source code (HTML, JSX, TSX, CSS) and design context files (PRODUCT.md, DESIGN.md) to generate UI variants.
- Boundary markers: Does not utilize explicit delimiters when processing project files into the agent's context.
- Capability inventory: Significant file system modification capabilities via
fs.writeFileSyncinlive-accept.mjs,live-wrap.mjs, andlive-inject.mjs, alongside the ability to execute subprocesses. - Sanitization: Content extracted from project files is not sanitized before being processed or written back to the source during design refinement.
Audit Metadata