vike-core

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @vike-io/cli package via npm. This package belongs to the skill's author (vike-io) and is necessary for the skill's primary functionality.
  • [COMMAND_EXECUTION]: The skill uses a dedicated CLI binary vike-data to perform on-chain analytics and tool operations. The execution is restricted to the specific tools documented in the frontmatter's allowed-tools configuration.
  • [INDIRECT_PROMPT_INJECTION]: As an analytics tool, the skill ingests data from external blockchain sources. While this presents a theoretical surface for indirect injection from on-chain data, the skill focuses on structured data retrieval (JSON/Table) and does not exhibit high-risk autonomous write capabilities.
  • [CREDENTIALS_SAFE]: The skill manages authentication via the VIKE_API_KEY environment variable or a local configuration file through vike-data login. These are standard methods for CLI authentication and do not involve hardcoded secrets or unsafe transmission of credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 01:14 AM