vike-wallet-ens
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
vike-datacommand-line tool to perform reverse ENS lookups. This is a vendor-provided tool (vike-io) used for its intended purpose within the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes wallet addresses provided as input and displays the resolved ENS names, which are external strings that could potentially contain malicious instructions.
- Ingestion points: The
<address>parameter in thevike-data wallet ens <address>command. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the prompt templates.
- Capability inventory: The skill is limited to executing the
vike-datacommand via Bash. - Sanitization: No sanitization of the resolved ENS name is documented before it is returned to the agent context.
Audit Metadata