nansen-search

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the nansen-cli package via Node.js (npm). This is the primary tool used by the skill to interact with the Nansen API.
  • [COMMAND_EXECUTION]: Utilizes bash to execute nansen CLI commands. Access is restricted to the nansen binary using a wildcard pattern (nansen:*), which follows the principle of least privilege.
  • [PROMPT_INJECTION]: The skill processes external data from the Nansen API (token names, entities). While this creates a surface for indirect prompt injection, the tool's capabilities are limited to research queries, minimizing the risk of exploitation.
  • Ingestion points: Output of nansen research search in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Limited to nansen CLI commands.
  • Sanitization: None mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 11:23 PM