nansen-sm-cross-chain-flows
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
nansen-cliNode.js package. This is a vendor-provided tool associated with the skill's author, nansen-ai. - [COMMAND_EXECUTION]: The skill uses a Bash loop to execute the
nansen research smart-money netflowcommand multiple times to retrieve financial metrics across different blockchain networks (Ethereum, Solana, Base, and BNB). - [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from an external source (the Nansen API).
- Ingestion points: Data enters the agent's context through the output of the
nansen researchCLI command. - Boundary markers: The instructions do not specify any delimiters or safety warnings for the agent when interpreting the API results.
- Capability inventory: The skill utilizes Bash execution via the
nansenCLI tool. - Sanitization: There is no explicit sanitization or validation of the structured financial data returned by the API before the agent analyzes it for rotation signals.
Audit Metadata