vibe-delegate
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/relay.mjsscript launches thevibeandgitbinaries using Node.jschild_processfunctions (spawn,execFileSync) to facilitate task delegation.- [EXTERNAL_DOWNLOADS]: The documentation instructs users to install themistral-vibetool from official package registries as a prerequisite for the skill's operation.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (task briefs and repository files) which is then passed to a delegated AI agent, creating a surface for indirect prompt injection. - Ingestion points:
scripts/relay.mjsingests task briefs from local files or standard input. - Boundary markers: The skill recommends using XML-like tags (e.g.,
<task>,<action_safety>) within briefs to separate instructions from data, as detailed inreferences/writing-the-brief.md. - Capability inventory: The delegated tool (
vibe) possesses capabilities to modify the local file system and execute shell commands, with elevated permissions available via the--full-accessflag. - Sanitization:
scripts/relay.mjsenforces character length limits on briefs and rejects NUL bytes to prevent command-line injection and overflow issues.
Audit Metadata