nansen-perp-trader-profile
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill installs and uses the
nansen-cliNode.js package, which is a legitimate vendor resource provided by the author to interface with their services. - [SAFE]: Credential management follows best practices by utilizing the
NANSEN_API_KEYenvironment variable for authentication, preventing the exposure of hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from blockchain analysis APIs, which represents a standard data ingestion surface.
- Ingestion points: The output of
nansen researchcommands (labels, trades, and positions) is loaded into the agent's context withinSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are specified for the API output.
- Capability inventory: The skill is limited to executing
nansenCLI research commands via the Bash tool. - Sanitization: The skill relies on the integrity of the vendor's own API responses and the agent's internal safety filters.
Audit Metadata