vike-core
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@vike-io/clipackage via npm. This package belongs to the skill's author (vike-io) and is necessary for the skill's primary functionality. - [COMMAND_EXECUTION]: The skill uses a dedicated CLI binary
vike-datato perform on-chain analytics and tool operations. The execution is restricted to the specific tools documented in the frontmatter'sallowed-toolsconfiguration. - [INDIRECT_PROMPT_INJECTION]: As an analytics tool, the skill ingests data from external blockchain sources. While this presents a theoretical surface for indirect injection from on-chain data, the skill focuses on structured data retrieval (JSON/Table) and does not exhibit high-risk autonomous write capabilities.
- [CREDENTIALS_SAFE]: The skill manages authentication via the
VIKE_API_KEYenvironment variable or a local configuration file throughvike-data login. These are standard methods for CLI authentication and do not involve hardcoded secrets or unsafe transmission of credentials.
Audit Metadata