nansen-smart-money-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
nansen-cliNode.js package during setup. This is the official command-line interface provided by the vendor to interact with their data services. - [COMMAND_EXECUTION]: The skill invokes the
nansenbinary to perform data queries. These operations are restricted to thenansen:*tool namespace as defined in the skill configuration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests financial data (netflows, trades, holdings) from the Nansen API which could theoretically contain malicious content. However, the risk is negligible due to the structured nature of financial data.
- Ingestion points: Output from the
nansen research smart-moneycommands (SKILL.md). - Boundary markers: The agent processes the tool output within standard execution boundaries; no explicit delimiters are defined in the skill instructions.
- Capability inventory: Execution of specific
nansensubcommands via Bash. - Sanitization: Output is handled as raw data by the agent; no specific sanitization logic is implemented in the skill body.
Audit Metadata