iblai-vibe-monetization-app-paywall
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides administrative setup commands using
curlto configure products and prices. These are standard configuration steps targeting the platform's official API for service integration. - [EXTERNAL_DOWNLOADS]: Fetches configuration and setup guidelines from the vendor's official GitHub repository (
iblai/vibe). These references are used for documentation and standard implementation patterns. - [CREDENTIALS_SAFE]: Instructs users on how to handle platform API tokens and Stripe restricted keys. It correctly advocates for using
.env.localfor secret management and performing identity resolution strictly on the server to prevent exposing sensitive credentials to the client environment. - [INDIRECT_PROMPT_INJECTION]: The skill defines a clear ingestion surface for user authentication tokens and checkout requests. It implements proper security boundaries, including server-side identity verification and an allowlist for price IDs, ensuring that untrusted data is validated before processing.
Audit Metadata