nansen-wallet-profiler
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
nansen-clipackage from the Node.js registry (NPM) during installation. This is a standard dependency for the skill's functionality. - [COMMAND_EXECUTION]: The skill is configured to execute the
nansenbinary. Command execution is restricted to this specific binary and its subcommands through theallowed-toolsconstraintBash(nansen:*), which limits the attack surface. - [CREDENTIALS_UNSAFE]: The skill requires a
NANSEN_API_KEY. It correctly instructs the platform to manage this via environment variables rather than hardcoding or requesting it in plain text. - [DATA_EXFILTRATION]: No suspicious data exfiltration patterns were detected. The skill interacts with the Nansen API to retrieve blockchain data, which is consistent with its stated purpose of wallet profiling.
Audit Metadata