nansen-wallet-batch
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
nansenCLI tool via shell commands to perform wallet profiling. Theallowed-toolsfield restricts execution to thenansenbinary scope. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
nansen-cliNode.js package during the setup process. This package is the official command-line interface for the service provided by the author. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided address lists and chain names which are interpolated into shell commands.
- Ingestion points: The
$ADDRESSESand$CHAINenvironment variables inSKILL.mdare used to store data from the agent context. - Boundary markers: None explicitly defined in the script for the input strings.
- Capability inventory: The skill has the capability to execute shell commands via the
Bashtool. - Sanitization: The skill relies on the underlying shell execution environment to handle variable expansion safely.
Audit Metadata