nansen-wallet-batch

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the nansen CLI tool via shell commands to perform wallet profiling. The allowed-tools field restricts execution to the nansen binary scope.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the nansen-cli Node.js package during the setup process. This package is the official command-line interface for the service provided by the author.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided address lists and chain names which are interpolated into shell commands.
  • Ingestion points: The $ADDRESSES and $CHAIN environment variables in SKILL.md are used to store data from the agent context.
  • Boundary markers: None explicitly defined in the script for the input strings.
  • Capability inventory: The skill has the capability to execute shell commands via the Bash tool.
  • Sanitization: The skill relies on the underlying shell execution environment to handle variable expansion safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 06:20 AM