vibes
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell utilities such as
mkdirfor directory creation,lsfor file listing, andgrepfor searching cultural logs. These operations are localized to the./kyp/vibes/directory within the workspace. - [EXTERNAL_DOWNLOADS]: Includes a reference to fetch the latest
SKILL.mdfile from the author's GitHub repository (https://raw.githubusercontent.com/Know-Your-People/vibes-skill/main/SKILL.md) for updating the skill's instructions. - [PROMPT_INJECTION]: As the skill reads and processes user-generated markdown files, it contains a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Markdown files located in the
kyp/vibes/subdirectories. - Boundary markers: No explicit markers are defined to separate user data from instructions when reading cultural logs.
- Capability inventory: Includes shell command execution (
grep,ls,mkdir) and workspace file writing. - Sanitization: No explicit sanitization or validation of file content is specified.
Audit Metadata