Nansen Dca Tracker
v0.1.0What tokens are whales dollar-cost averaging into? Jupiter DCA strategies by smart money and target token fundamentals.
⭐ 0· 120·1 current·1 all-time
byNansen AI@nansen-devops
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (tracking DCA activity via Nansen) align with required binary 'nansen' and required env var NANSEN_API_KEY. The declared primary credential is the Nansen API key — appropriate for this functionality.
Instruction Scope
SKILL.md only instructs running the nansen CLI to query smart-money DCA lists and token info/flow; it does not request unrelated files, environment variables, or external endpoints beyond Nansen's CLI usage.
Install Mechanism
Install spec is a public Node package (nansen-cli) that provides the 'nansen' binary — this is a reasonable distribution method but carries the usual npm risk (package code runs on install). Verify the package provenance and version before installing.
Credentials
Only a single credential (NANSEN_API_KEY) is required and serves the stated purpose. This key is sensitive and should be scoped/rotated appropriately, but its presence is proportionate to the skill's function.
Persistence & Privilege
always is false and the skill does not request system-wide configuration or other skills' credentials. Autonomous invocation is allowed by default (platform norm) but not combined with other concerning privileges.
Assessment
This skill is coherent with its stated purpose, but take normal precautions before installing: 1) verify the npm package 'nansen-cli' (maintainer, download counts, published source and version) to reduce supply-chain risk; 2) treat NANSEN_API_KEY as sensitive — prefer a limited/read-only key if Nansen supports it, and rotate it if needed; 3) install the CLI in a controlled environment (sandbox or container) if you want to limit impact; 4) review network egress policies and rate limits for your API key. If you cannot verify the npm package or do not want to provide your Nansen API key, do not install the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97c25a36anm0wnxk2btr2gngd832js7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsnansen
EnvNANSEN_API_KEY
Primary envNANSEN_API_KEY
Install
Node
Bins: nansen
npm i -g nansen-cli