vibehub
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to vibe-hub.org to fetch technical terminology metadata and search results.
- The
scripts/vibehub.mjsscript performs GET requests to resolve terms provided by the user. - The domain vibe-hub.org is a vendor-owned resource associated with the skill author.
- [COMMAND_EXECUTION]: The skill uses a local Node.js script (
scripts/vibehub.mjs) to handle terminology resolution. - The agent is instructed to execute this script via the command line to verify candidate terms derived from user input.
- [SAFE]: The skill implements a
sanitizeRemoteTextfunction in its resolution script that proactively removes code blocks, URLs, file paths, email addresses, and common secret patterns (API keys, tokens, JWTs) from queries before they are sent to the remote server. This significantly reduces the risk of accidental data exposure during terminology lookups.
Audit Metadata