iblai-vibe-monetization-configure
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an environment configuration template and installs required skill components from the official iblai GitHub repository. These are vendor-owned resources used for legitimate setup purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for administrators to enter product names, descriptions, and feature lists which are subsequently displayed to users during the checkout process.
- Ingestion points: Input forms in the administrative MonetizationTab and PriceManagement components described in
SKILL.md. - Boundary markers: The provided instructions do not specify explicit delimiters or "ignore instructions" markers for the user-supplied metadata.
- Capability inventory: The skill interacts with the iblai backend API via SDK mutations to persist paywall configurations and synchronize Stripe products.
- Sanitization: The skill uses a
slugify()utility to sanitize and normalize item identifiers and types before processing.
Audit Metadata