nansen-fund-tracker
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
nansenCLI tool to perform research queries, such as retrieving smart-money holdings and netflow data for tokens on the Ethereum and Solana blockchains. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data fetched from the Nansen API, which represents a potential injection surface.
- Ingestion points: Financial data (token symbols, balances, flow metrics) retrieved by the
nansenbinary is incorporated into the agent's context. - Boundary markers: No explicit delimiters are defined in the instructions to isolate the external API output from the agent's core instructions.
- Capability inventory: The skill is scoped to execute the
nansenbinary within a Bash environment. - Sanitization: The skill relies on the structured nature of the Nansen CLI output; no additional sanitization or filtering of the remote data is described.
Audit Metadata