nansen-hyperliquid
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
nansenCLI binary to perform complex trading queries, which is a standard operational requirement for this vendor-provided skill. - [EXTERNAL_DOWNLOADS]: Data is retrieved from the official Nansen API (
api.nansen.ai) using authenticated HTTP requests. This is a trusted vendor service. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface (Category 8). 1. Ingestion points: External data enters the agent context via the
nansenCLI output and API JSON responses. 2. Boundary markers: The skill does not define specific delimiters to isolate external data. 3. Capability inventory: The agent can execute system commands using thenansenbinary. 4. Sanitization: No explicit data sanitization or validation logic is provided in the skill definition.
Audit Metadata