nansen-polymarket-deep-dive
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or obfuscated code segments were detected in the skill instructions or metadata.\n- [COMMAND_EXECUTION]: The skill uses the
nansencommand-line utility to retrieve OHLCV, orderbook, and holder data. Execution is properly scoped to thenansenbinary via theallowed-toolsfield in the frontmatter, ensuring the agent cannot execute unauthorized shell commands.\n- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of thenansen-cliNode.js package. This is a standard dependency for accessing Nansen's analytics services.\n- [SAFE]: The skill processes external market data retrieved via the CLI. While this presents a potential surface for indirect prompt injection, the skill's capabilities are limited to data retrieval, and it lacks dangerous write or execution permissions that could be exploited.
Audit Metadata