Skills
Navigate
skills/internet-court/internet-court-skill/nansen-mpp-payment/Gen Agent Trust Hub

nansen-mpp-payment

Fail

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documentation provides an installation command curl -fsSL https://tempo.xyz/install | bash that executes a remote script without prior verification or integrity checks. This allows the host at tempo.xyz to execute arbitrary code on the user's system.
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading and installing software from tempo.xyz and interacting with api.nansen.ai. These domains are not associated with trusted organizations or well-known services provided in the analyzer's configuration.
  • [COMMAND_EXECUTION]: The skill utilizes the tempo CLI to perform sensitive operations, including wallet management (tempo wallet login, tempo wallet fund) and making authenticated network requests (tempo request). This grants the agent the capability to perform financial and network operations through an externally installed binary.
Recommendations
  • HIGH: Downloads and executes remote code from: https://tempo.xyz/install - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 23, 2026, 04:05 PM