nansen-wallet-clustering

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the nansen-cli tool to query blockchain data. The configuration in SKILL.md uses allowed-tools to restrict the agent's bash capabilities specifically to the nansen binary, minimizing the risk of arbitrary command execution.
  • [CREDENTIALS_UNSAFE]: The skill requires a NANSEN_API_KEY. It correctly leverages the environment variable configuration (NANSEN_API_KEY) for secret management, which is the standard safe practice for providing API keys to agents.
  • [EXTERNAL_DOWNLOADS]: The skill defines the installation of the nansen-cli Node.js package. This is a functional requirement for the skill and targets a known package for interacting with the Nansen service.
  • [DATA_EXFILTRATION]: Network operations are performed solely through the nansen-cli to communicate with the official Nansen API for wallet research. No unauthorized data transmission or access to sensitive local files was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 09:14 PM