iblai-vibe-monetization-app-paywall
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches setup documentation and visual guidelines from the vendor's official GitHub repository (
iblai/vibe). These references are for documentation purposes and follow the vendor's established development workflow. - [COMMAND_EXECUTION]: Performs standard filesystem operations such as copying assets from sibling skill directories (
iblai-vibe-ops-init), removing deprecated files during upgrades, and running package manager commands (pnpm) for testing and type-checking. These actions are limited to the application's own directory. - [DATA_EXPOSURE]: Accesses local environment files (
iblai.env,.env.local) to retrieve configuration slugs and platform tokens, which is standard behavior for the ibl.ai development ecosystem. The skill instructions explicitly prohibit the agent from asking for or accepting Stripe API keys in chat, adhering to security best practices for secret management.
Audit Metadata