iblai-vibe-monetization-onboard
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches environment templates and brand guidelines from the vendor's official GitHub repository (iblai/vibe).- [INDIRECT_PROMPT_INJECTION]: The skill provides logic to fetch and process an OpenAPI schema from the vendor's API endpoint to ensure endpoint compatibility. This constitutes an ingestion point for external data, but the risk is managed via the trusted source.- [COMMAND_EXECUTION]: Standard development commands are used, including package installation via pnpm/npm, running a local development server, and using the shadcn CLI to add UI components.
Audit Metadata