iblai-vibe-project
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install multiple packages from the
@iblaiscope (e.g.,@iblai/iblai-js,@iblai/agent-ai). These are official vendor packages and represent standard integration practices. - [EXTERNAL_DOWNLOADS]: The documentation references images and setup guides hosted on the official
iblaiGitHub repository (raw.githubusercontent.com/iblai/vibe). These are trusted resources within the context of the skill author. - [COMMAND_EXECUTION]: The skill provides shell commands for managing the local development environment, such as
pnpm addfor dependency management andgrep/catfor verifying package versions and properties. - [SAFE]: The provided React code implements a standard Next.js client component that utilizes the vendor's SDK. It uses
localStoragefor tenant management and standard hooks for session data, all of which are passed directly to the official<Chat>component. There are no signs of data exfiltration to unauthorized third parties or malicious logic.
Audit Metadata