iblai-vibe-readme
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from various local project files (e.g., package.json, iblai.env, and existing README.md) to generate updated documentation. This is a standard property of documentation tools, representing a surface where malicious content in those files could theoretically influence the agent's output.
- Ingestion points: The skill reads package.json, iblai.env, Dockerfile, next.config.{ts,mjs,js}, src-tauri/tauri.conf.json, and existing README.md files from the user's repository.
- Boundary markers: No specific boundary markers or "ignore instructions" warnings are applied during the interpolation of project data into the final template.
- Capability inventory: The skill is granted file read access to project configurations and write access to the README.md file.
- Sanitization: The instructions do not define explicit sanitization or validation routines for data extracted from project files before it is included in the documentation.
- [EXTERNAL_DOWNLOADS]: The skill references image assets and project links from the official iblai GitHub organization and related documentation sites. These are trusted vendor resources used for branding and developer guidance.
Audit Metadata