nansen-dca-tracker

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via the nansen research command, including token addresses, labels, and transaction values. This data is processed by the agent without explicit boundary markers to separate instructions from data.
  • Ingestion points: SKILL.md (via shell command output from the Nansen API).
  • Boundary markers: None identified.
  • Capability inventory: Shell command execution restricted to the nansen CLI binary.
  • Sanitization: The skill does not specify sanitization procedures for the data retrieved from the blockchain API.
  • [EXTERNAL_DOWNLOADS]: The skill metadata specifies the installation of the nansen-cli package from the Node.js package manager. This package is the official tool provided by the skill's authoring organization.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute nansen CLI commands for research, authentication status checks, and session management.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 06:20 AM