iblai-vibe-ops-build
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various build-time commands including
pnpm,cargo, and platform-specific utilities likexcrunandadb. These operations are essential for the skill's primary function of building cross-platform applications. - [DATA_EXFILTRATION]: The skill documentation guides the user in setting up sensitive environment variables and GitHub Secrets (e.g., Apple Developer credentials, Windows PFX certificates) required for signed release builds. These instructions follow standard security practices for credential management in development and automation workflows.
- [REMOTE_CODE_EXECUTION]: External tools such as the Rust toolchain and the Tauri CLI are utilized. These are obtained from well-known and reputable sources (rustup.rs and the official Tauri registry), which is consistent with modern development practices for these technologies.
- [DYNAMIC_EXECUTION]: The provided Rust templates for the application shell include the use of
window.evalto handle application navigation following authentication callbacks. While dynamic, this implementation is standard for bridging native authentication sessions with webview-based application logic. - [SAFE]: The skill implements security mitigations, such as advising the use of
--ignore-scriptsduring dependency installation to prevent the execution of potentially malicious post-install scripts.
Audit Metadata