iblai-vibe-navbar
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a logo from the vendor's official domain (
ibl.ai) and provides a command to clone a starter template from the vendor's official GitHub repository (github.com/iblai/vibe). Both sources are verified vendor-controlled infrastructure. - [COMMAND_EXECUTION]: The skill includes standard development commands for package installation and UI component initialization. It demonstrates a security-conscious approach by recommending the
--ignore-scriptsflag during package installation to prevent the execution of potentially malicious lifecycle scripts. - [SAFE]: The skill correctly implements the vendor's SDK (
@iblai/iblai-js) and common community packages (lucide-react). Access to local storage is used appropriately to retrieve session-related metadata (like usernames and email addresses) for display within the navigation components.
Audit Metadata