vike-token-screener
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines command syntax and parameters for the vike-data CLI tool. These commands are executed via Bash and are restricted to the vike-data toolset as specified in the allowed-tools configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing external, untrusted blockchain data. * Ingestion points: Data is ingested from the output of the vike-data token screener command, which includes fields like token_address, symbol, and name. * Boundary markers: The instructions do not provide explicit delimiters or instructions for the agent to ignore instructions embedded in the ingested data. * Capability inventory: The agent has permission to execute any tool within the vike-data namespace using Bash. * Sanitization: No sanitization or validation logic for the third-party token metadata is provided in the skill instructions.
Audit Metadata