vike-hl-trader-profile
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
vikeCLI tool to perform blockchain wallet lookups and fetch leaderboard data from the Hyperliquid platform. These operations are limited to data retrieval using vendor-authorized commands. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input in the form of a wallet address used in shell commands.
- Ingestion points: User-supplied
<address>inSKILL.mdsteps. - Boundary markers: None present.
- Capability inventory:
vike wallet summary,vike perp top-traders(Bash tool calls). - Sanitization: Not explicitly mentioned in the instructions, implying reliance on the agent's execution environment for input cleaning.
Audit Metadata