nansen-polymarket-deep-dive

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscated code segments were detected in the skill instructions or metadata.\n- [COMMAND_EXECUTION]: The skill uses the nansen command-line utility to retrieve OHLCV, orderbook, and holder data. Execution is properly scoped to the nansen binary via the allowed-tools field in the frontmatter, ensuring the agent cannot execute unauthorized shell commands.\n- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the nansen-cli Node.js package. This is a standard dependency for accessing Nansen's analytics services.\n- [SAFE]: The skill processes external market data retrieved via the CLI. While this presents a potential surface for indirect prompt injection, the skill's capabilities are limited to data retrieval, and it lacks dangerous write or execution permissions that could be exploited.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 09:14 PM