vibe-add-feature
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and documentation for project scaffolding and component integration. No indicators of prompt injection, data exfiltration, or persistence mechanisms were found.
- [EXTERNAL_DOWNLOADS]: The skill mentions the installation of dependencies via
npxandpnpm. These actions target the vendor's own CLI tool (@iblai/cli) and the well-knownshadcnUI library, which are standard developer practices. - [COMMAND_EXECUTION]: The instructions include command-line examples for the
iblaiandshadcntools. These commands are typical for the described use case and do not exhibit suspicious behavior or privilege escalation attempts.
Audit Metadata