iblai-vibe-readme
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate documentation tool for managing README.md files within the ibl.ai ecosystem. No malicious patterns or security risks were detected during analysis.
- [DATA_EXPOSURE]: The skill reads local project metadata from files like
package.jsonandiblai.envto populate documentation fields. There is no evidence of data exfiltration or unauthorized access to sensitive system secrets. - [COMMAND_EXECUTION]: The README template includes standard development and build commands (e.g.,
pnpm dev,docker build,rustup target add). These are provided as documentation for the user and are not executed by the agent skill itself. - [EXTERNAL_DOWNLOADS]: The skill references official vendor resources, including GitHub repositories and NPM packages under the
@iblai/scope. These are well-known resources consistent with the skill's authorship. - [PROMPT_INJECTION]: The instructions are clearly defined and do not contain any patterns intended to bypass safety guardrails or override agent behavior maliciously.
Audit Metadata