vike-perp-funding-arb
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a restricted environment by limiting executable tools to the
vike:*namespace, following the principle of least privilege. The commands used (vike perp funding) are vendor-specific resources for the author vike-io. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that could theoretically be exposed to adversarial content from external exchange data.
- Ingestion points: Output from perpetual futures venues (Binance, Bybit, etc.) via the
vikeCLI tool. - Boundary markers: Data is ingested using the
--jsonflag, ensuring structured parsing. - Capability inventory: The agent is restricted to
Bash(vike:*)tools; no arbitrary file writing or non-vendor network tools are enabled. - Sanitization: The use of JSON formatted output minimizes the risk of the agent misinterpreting data as instructions.
Audit Metadata