nano
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bunx,pnpm, ornpxto execute thexno-skillsCLI tool for wallet operations. This execution is limited to specific commands and incorporates safety checks to prevent arbitrary command injection. - [EXTERNAL_DOWNLOADS]: The CLI tool is fetched from the npm registry using the
@latesttag. This is the intended fallback mechanism for the skill's operation when the MCP environment is unavailable. - [DATA_EXFILTRATION]: The skill communicates with public Nano RPC nodes like
rainstorm.cityand0x.no. These interactions are standard for querying blockchain state and broadcasting transactions, and the skill explicitly prohibits the use of generic tools likecurlfor these operations. - [PROMPT_INJECTION]: The skill contains negative constraints and safety rules (e.g., 'Never export mnemonics') designed to guide the agent toward secure behavior rather than overriding system instructions.
Audit Metadata