skills/iblai/vibe/iblai-install/Gen Agent Trust Hub

iblai-install

Warn

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the CLI tool directly from the vendor's official GitHub repository (github.com/iblai/iblai-app-cli.git) and utilizes npx to fetch the @iblai/cli package from the npm registry.
  • [REMOTE_CODE_EXECUTION]: The skill executes external scripts and binaries through npx and by running make or pip installation commands on content downloaded from a remote repository.
  • [COMMAND_EXECUTION]: The skill appends environment variable exports to shell configuration files (~/.bashrc and ~/.zshrc) to ensure the newly installed tool is available in the system PATH across sessions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 30, 2026, 03:10 PM