iblai-vibe-scaffold
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The generated project templates include Windows-specific build scripts in
package.jsonthat execute PowerShell with theExecutionPolicy Bypassflag for tasks such as MSIX packaging and test certificate setup. - [EXTERNAL_DOWNLOADS]: The scaffolded applications are configured to fetch numerous dependencies from the NPM registry, including standard framework libraries (Next.js, React) and vendor-specific SDKs from the
@iblaiscope. - [EXTERNAL_DOWNLOADS]: The
.mcp.jsontemplate configures development tools to be executed viapnpm dlxandnpx, which involves downloading and running packages from the NPM registry at runtime.
Audit Metadata