nansen-limit-orders
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data, including token symbols, amounts, and trigger prices, and interpolates them into bash commands for the
nansenCLI. This creates a surface where specially crafted input could influence the constructed command flags. - Ingestion points: Command flags in
SKILL.mdsuch as--from,--to,--amount, and--trigger-priceare populated with user input. - Boundary markers: None identified in the instruction templates to delimit user input from the command structure.
- Capability inventory: The skill is authorized to execute
Bash(nansen:*)as specified in theallowed-toolsmetadata. - Sanitization: No explicit sanitization or validation of user input is defined within the skill instructions, relying on the underlying CLI tool for processing.
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official
nansen-clipackage from the public npm registry during setup. - Evidence: The
installsection inSKILL.mdspecifiespackage: nansen-cliusing thenodeinstaller.
Audit Metadata