nansen-trading

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and tooling are internally consistent with an official Nansen trading workflow, and the install source appears legitimate. However, this skill is high risk because it enables autonomous irreversible financial transactions and instructs use of a persisted wallet password from ~/.nansen/.env for networked execution.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Mar 28, 2026, 09:16 PM
Package URL
pkg:socket/skills-sh/askeluv%2Fnansen-cli%2Fnansen-trading%2F@833aba12caf35930412eb76fe8eb524122bede65
Security Audit — socket — nansen-trading