iblai-vibe-monetization-checkout

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches environment templates and brand guidelines from the vendor's official GitHub repository (github.com/iblai/vibe). These resources are used to establish the development environment and are sourced from a recognized repository.
  • [COMMAND_EXECUTION]: Employs standard commands such as pnpm dev for running the development server and npx shadcn for component management. These are expected within a frontend development context.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests item metadata and pricing information from the api.iblai.app endpoints to render buyer-facing UI components. This represents a standard data ingestion surface.
  • Ingestion points: Data returned from useCheckAccessQuery and useGetPublicPricingQuery (SKILL.md).
  • Boundary markers: None explicitly defined in the UI component templates.
  • Capability inventory: File system writes (React component creation), network communication (Stripe and ibl.ai API calls), and local command execution (pnpm dev).
  • Sanitization: Not detailed in the skill body; relies on the underlying @iblai/iblai-js SDK and standard React rendering protections.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 04:27 PM
Security Audit — agent-trust-hub — iblai-vibe-monetization-checkout