nano
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell command execution via bunx, npx, or pnpm to run the xno-skills CLI tool for blockchain operations.
- [EXTERNAL_DOWNLOADS]: The skill fetches the xno-skills package (version 3.1.2) from the npm registry at runtime. As this package is the primary tool for the skill's functionality and specifies a fixed version, it is documented as a standard dependency.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. It ingests untrusted data from the Nano blockchain through wallet.history and payment status checks. This external data, such as transaction 'reasons', is interpolated into the agent's context without explicit boundary markers or sanitization, which could potentially allow an attacker to influence agent behavior through malicious transaction metadata.
Audit Metadata