skills/iblai/vibe/iblai-vibe-design/Gen Agent Trust Hub

iblai-vibe-design

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses internal scripts that invoke execSync, execFileSync, and spawn to manage a local development server, perform file operations like wrapping elements for variant testing, and reporting status to the agent.
  • [EXTERNAL_DOWNLOADS]: Fetches design system configuration from the author's own GitHub repository (iblai/vibe).
  • [OBFUSCATION]: Uses base64 encoding within live-inject.mjs to store original Content Security Policy (CSP) values in HTML attributes. This is used as a functional mechanism to ensure exact restoration of user files when the live design mode is deactivated.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Reads project source code (HTML, JSX, TSX, CSS) and design context files (PRODUCT.md, DESIGN.md) to generate UI variants.
  • Boundary markers: Does not utilize explicit delimiters when processing project files into the agent's context.
  • Capability inventory: Significant file system modification capabilities via fs.writeFileSync in live-accept.mjs, live-wrap.mjs, and live-inject.mjs, alongside the ability to execute subprocesses.
  • Sanitization: Content extracted from project files is not sanitized before being processed or written back to the source during design refinement.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:43 PM