iblai-vibe-monetization-subscription

Fail

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads configuration files and guidelines from the author's official GitHub repository and API endpoints. These resources are managed by the vendor (iblai) and are necessary for the skill's functionality. Evidence: Fetches BRAND.md, skill-setup.md, iblai.env from github.com/iblai/vibe and the OpenAPI schema from api.iblai.app.- [COMMAND_EXECUTION]: The skill instructs the agent to use standard shell commands for development tasks. A static scan flagged a potential remote code execution pattern involving curl and grep on the API schema; however, analysis shows this is a benign operation used to search text, not to execute code. Evidence: Commands include pnpm install, npx shadcn@latest add, and pnpm dev.- [PROMPT_INJECTION]: The skill ingests and processes external data which could potentially contain malicious instructions, creating a surface for indirect prompt injection. Ingestion points: Data enters the context via useGetMySubscriptionsQuery and useGetItemSubscriptionQuery in SKILL.md. Boundary markers: None identified in the provided instructions for delimiting untrusted API data. Capability inventory: The skill has access to shell execution (pnpm, npx), network operations (API calls), and file system writes (iblai.env). Sanitization: No specific sanitization or validation logic for the fetched subscription data is described.
Recommendations
  • HIGH: Downloads and executes remote code from: https://api.iblai.app/dm/api/docs/schema/ - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 25, 2026, 04:27 PM
Security Audit — agent-trust-hub — iblai-vibe-monetization-subscription