nansen-dca-tracker
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via the
nansen researchcommand, including token addresses, labels, and transaction values. This data is processed by the agent without explicit boundary markers to separate instructions from data. - Ingestion points:
SKILL.md(via shell command output from the Nansen API). - Boundary markers: None identified.
- Capability inventory: Shell command execution restricted to the
nansenCLI binary. - Sanitization: The skill does not specify sanitization procedures for the data retrieved from the blockchain API.
- [EXTERNAL_DOWNLOADS]: The skill metadata specifies the installation of the
nansen-clipackage from the Node.js package manager. This package is the official tool provided by the skill's authoring organization. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executenansenCLI commands for research, authentication status checks, and session management.
Audit Metadata