The Agent Skills Directory

[SAFE]: The skill facilitates searching for blockchain tokens and entities using the Nansen analytics platform. It follows established practices for CLI integration and credential management.
[EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the nansen-cli Node.js package. This is a legitimate vendor resource provided by the author (nansen-ai) and is required for the skill's core functionality.
[COMMAND_EXECUTION]: Shell execution is limited to the nansen binary through the Bash(nansen:*) tool restriction, which follows the principle of least privilege by preventing arbitrary command execution.
[CREDENTIALS_UNSAFE]: The skill utilizes the NANSEN_API_KEY environment variable for authentication. Using environment variables for secrets is a standard security practice for CLI tools to avoid hardcoding credentials in the instructions or scripts.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data returned from the Nansen API. While this creates a potential surface for indirect injection (e.g., malicious token names), the scope of available tools is restricted, and the risk is inherent to the primary purpose of the skill.

nansen-general-search