vike-smart-money-discovery
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows secure practices, utilizing specific vendor-provided tools (
vike-data) to perform its intended blockchain analysis tasks. No signs of obfuscation, credential theft, or unauthorized persistence were found. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (blockchain transaction records). While this represents a theoretical injection surface if transaction labels or token names contained malicious instructions, the skill lacks dangerous capabilities that would make such an injection exploitable.
- Ingestion points: JSON output from
vike-data token screener,vike-data token transfers, andvike-data wallet summarycommands. - Boundary markers: None present; data is interpolated directly into the response template.
- Capability inventory: Tool execution is limited to the
vike-dataCLI; no file writes, persistence mechanisms, or external exfiltration tools are used. - Sanitization: No explicit sanitization or escaping of blockchain data is performed before interpolation.
Audit Metadata