iblai-vibe-notification
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration files (
iblai.env) and starter templates directly from the vendor's official GitHub repository (github.com/iblai/vibe). - [COMMAND_EXECUTION]: The instructions include standard development commands for package management (
pnpm install), building, testing, and UI verification using Playwright. - [INDIRECT_PROMPT_INJECTION]: The skill implements components that display notification data (titles and messages) retrieved from an external API. This creates a potential surface for indirect injection if the source data is controlled by an attacker; however, the API documentation specifies that templates are sanitized server-side using the
bleachlibrary to strip dangerous HTML and scripts. - Ingestion points: Notification data retrieved from the REST API endpoints (
/notifications/). - Boundary markers: Not explicitly defined in the provided React component template.
- Capability inventory: File system writes (creating components) and command execution (build/test scripts).
- Sanitization: The documentation notes that
email_html_templatecontent is sanitized using thebleachlibrary.
Audit Metadata