vibe-new-app
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands using the iblai CLI and npx, such as
iblai startappandnpx @iblai/cli init, to automate project setup and initialization. - [EXTERNAL_DOWNLOADS]: The skill triggers the download of vendor-specific Node.js packages, including
@iblai/cli,@iblai/mcp, and@iblai/iblai-js, which are necessary for the application's functionality. - [CREDENTIALS_UNSAFE]: The instructions guide the user to configure local environment variables in
.envfiles and provide a placeholder example (sk-ant-...) for an API key in a command-line argument, following standard development practices for configuration management.
Audit Metadata