vike-hl-top-traders
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process structured JSON data (trading metrics and addresses) retrieved via the
vike-datatool. This creates an interface for external data ingestion. However, the risk is minimal as the data consists of financial statistics, and the skill includes specific guidelines for interpreting these fields without performing dangerous downstream actions like file writes or arbitrary network requests based on the data content. - [COMMAND_EXECUTION]: The skill utilizes the
vike-dataCLI tool via Bash to fetch trading data. This command is restricted to the specific vendor toolset (vike-data:*) as defined in theallowed-toolsfrontmatter, representing a legitimate use of scoped system capabilities for data retrieval.
Audit Metadata