skills/iblai/vibe/iblai-profile/Socket

iblai-profile

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a UI scaffolding skill, but it expands trust to the iblai CLI, MCP installation, and mutable remote content. The main risk is supply-chain and transitive skill installation rather than clear malicious behavior or obvious credential exfiltration.

Confidence: 79%Severity: 56%

Audit Metadata

Analyzed At

Apr 5, 2026, 04:57 PM

Package URL

pkg:socket/skills-sh/iblai%2Fvibe%2Fiblai-profile%2F@79ca9e242be9e68400a8789f7ce25418af448abd