vibe-delegate

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/relay.mjs script launches the vibe and git binaries using Node.js child_process functions (spawn, execFileSync) to facilitate task delegation.- [EXTERNAL_DOWNLOADS]: The documentation instructs users to install the mistral-vibe tool from official package registries as a prerequisite for the skill's operation.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (task briefs and repository files) which is then passed to a delegated AI agent, creating a surface for indirect prompt injection.
  • Ingestion points: scripts/relay.mjs ingests task briefs from local files or standard input.
  • Boundary markers: The skill recommends using XML-like tags (e.g., <task>, <action_safety>) within briefs to separate instructions from data, as detailed in references/writing-the-brief.md.
  • Capability inventory: The delegated tool (vibe) possesses capabilities to modify the local file system and execute shell commands, with elevated permissions available via the --full-access flag.
  • Sanitization: scripts/relay.mjs enforces character length limits on briefs and rejects NUL bytes to prevent command-line injection and overflow issues.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 07:53 AM