vike-defi-positions
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
vikeCLI tool (vike defi <address>) to retrieve information about wallet positions. This execution is limited to the vendor's own toolset as defined in the allowed-tools configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external DeFi protocols (such as protocol names and chain IDs), which constitutes an untrusted data source.
- Ingestion points: External DeFi protocol data returned by the
vike deficommand (SKILL.md). - Boundary markers: None identified; external data is not wrapped in specific delimiters or instructions to ignore embedded content.
- Capability inventory: The skill has permission to execute the
vikecommand suite via Bash (SKILL.md). - Sanitization: The skill does not describe any specific sanitization or filtering of the protocol metadata before it is presented to the agent.
Audit Metadata