vike-token-holders
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a custom CLI tool,
vike-data, via Bash to perform blockchain data queries. This is the primary function of the skill and aligns with the author's provided context. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied input, specifically token addresses and chain names, to construct command-line arguments. This represents a data ingestion surface where external input influences tool execution.
- Ingestion points:
<token_address>,--chain, and--limitparameters in SKILL.md - Boundary markers: Absent
- Capability inventory: Shell command execution via
vike-datatool - Sanitization: No explicit sanitization or validation logic is provided within the instructions.
Audit Metadata