vibes

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell utilities such as mkdir for directory creation, ls for file listing, and grep for searching cultural logs. These operations are localized to the ./kyp/vibes/ directory within the workspace.
  • [EXTERNAL_DOWNLOADS]: Includes a reference to fetch the latest SKILL.md file from the author's GitHub repository (https://raw.githubusercontent.com/Know-Your-People/vibes-skill/main/SKILL.md) for updating the skill's instructions.
  • [PROMPT_INJECTION]: As the skill reads and processes user-generated markdown files, it contains a surface for indirect prompt injection if those files contain malicious instructions.
  • Ingestion points: Markdown files located in the kyp/vibes/ subdirectories.
  • Boundary markers: No explicit markers are defined to separate user data from instructions when reading cultural logs.
  • Capability inventory: Includes shell command execution (grep, ls, mkdir) and workspace file writing.
  • Sanitization: No explicit sanitization or validation of file content is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:46 AM