nansen-trading
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
nansenCLI commands for generating trade quotes and executing transactions on-chain. It includes an agent pattern that pipes command output to capture quote IDs. - [EXTERNAL_DOWNLOADS]: The skill installs the
nansen-clipackage from the npm registry. This package is an official resource provided by the vendor 'nansen-ai'. It also references the official source code repository on GitHub for transparency. - [DATA_EXPOSURE]: The skill handles sensitive information including a Nansen API key and a wallet encryption password (
NANSEN_WALLET_PASSWORD). It instructs the agent to persist the password in a local.envfile within the user's home directory (~/.nansen/.env), which is a standard practice for local CLI credential management.
Audit Metadata