nansen-general-search
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
nansen-clipackage from the Node.js registry (npm) during the installation phase. This is the primary tool used by the skill to perform its search functions. - [COMMAND_EXECUTION]: The skill executes the
nansenbinary using the Bash tool. The execution scope is explicitly restricted tonansen:*commands within theallowed-toolsfrontmatter, preventing arbitrary shell command execution. - [CREDENTIALS_UNSAFE]: The skill requires a
NANSEN_API_KEY. It correctly defines this as an environment variable requirement (NANSEN_API_KEY) rather than requesting hardcoded credentials, which is a standard and safe practice for secret management.
Audit Metadata