nansen-smart-alerts
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
nansen-clipackage from the Node.js registry (npm) during the setup process to provide the necessary command-line tools. - [COMMAND_EXECUTION]: The skill uses the
Bash(nansen:*)tool to execute various subcommands for alert management. It includes a--dataflag described as a JSON escape hatch, which allows passing raw structured data directly to the underlying CLI tool. - [DATA_EXFILTRATION]: The skill supports configuring
--webhook,--slack, and--discordendpoints for alert notifications. While these are legitimate features for data delivery to external services, they represent standard egress points for alert data as per the skill's intended purpose.
Audit Metadata