iblai-vibe-invite
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions to download configuration templates from the vendor's verified GitHub repository. This is a standard and safe integration pattern for the ibl.ai ecosystem.
- [SAFE]: All external software dependencies, such as the @iblai/iblai-js SDK and shadcn/ui components, are standard industry tools or official vendor packages.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection by ingesting data from the iblai.env file. However, this is a standard configuration requirement for the skill's primary function and does not present an immediate security risk in this context. * Ingestion points: Environment variables in iblai.env (SKILL.md). * Boundary markers: Not present. * Capability inventory: Build and test command execution (pnpm, npx playwright) (SKILL.md). * Sanitization: Not specified.
Audit Metadata