iblai-vibe-monetization-subscription
Fail
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads configuration files and guidelines from the author's official GitHub repository and API endpoints. These resources are managed by the vendor (iblai) and are necessary for the skill's functionality. Evidence: Fetches
BRAND.md,skill-setup.md,iblai.envfromgithub.com/iblai/vibeand the OpenAPI schema fromapi.iblai.app.- [COMMAND_EXECUTION]: The skill instructs the agent to use standard shell commands for development tasks. A static scan flagged a potential remote code execution pattern involvingcurlandgrepon the API schema; however, analysis shows this is a benign operation used to search text, not to execute code. Evidence: Commands includepnpm install,npx shadcn@latest add, andpnpm dev.- [PROMPT_INJECTION]: The skill ingests and processes external data which could potentially contain malicious instructions, creating a surface for indirect prompt injection. Ingestion points: Data enters the context viauseGetMySubscriptionsQueryanduseGetItemSubscriptionQueryinSKILL.md. Boundary markers: None identified in the provided instructions for delimiting untrusted API data. Capability inventory: The skill has access to shell execution (pnpm,npx), network operations (API calls), and file system writes (iblai.env). Sanitization: No specific sanitization or validation logic for the fetched subscription data is described.
Recommendations
- HIGH: Downloads and executes remote code from: https://api.iblai.app/dm/api/docs/schema/ - DO NOT USE without thorough review
Audit Metadata