Nansen Token Research
v0.1.0Token deep dive — info, OHLCV, holders, flows, flow intelligence, who bought/sold, DEX trades, PnL, perp trades, perp positions, perp PnL leaderboard. Use wh...
⭐ 0· 117·1 current·1 all-time
byNansen AI@nansen-devops
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe Nansen token research and the skill requires the 'nansen' CLI and NANSEN_API_KEY, which are exactly what a Nansen CLI integration would need. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md consists solely of explicit nansen CLI commands (research token subcommands and flags). It does not instruct the agent to read arbitrary files, other environment variables, or send data to endpoints outside the Nansen CLI's normal behavior.
Install Mechanism
Install is a Node package (nansen-cli) that provides the 'nansen' binary. npm installs are an expected way to provide a CLI, but downloading and installing a package executes third-party code on the host — moderate risk. The skill metadata lists no source/homepage, so users should verify the npm package publisher and integrity before installing.
Credentials
Only NANSEN_API_KEY is required and it's declared as the primary credential. That matches the described functionality (requests to Nansen API). No additional secrets or config paths are requested.
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges. Autonomous invocation is allowed by default (normal for skills) but not combined with other concerning flags.
Assessment
This skill appears to be an instruction-only wrapper around the official Nansen CLI and only needs your NANSEN_API_KEY. Before installing, verify the npm package 'nansen-cli' publisher and reviews (or prefer installing the CLI yourself), and limit the API key permissions/monitor usage if possible (to avoid unexpected billing or data exposure). Installing a Node package will run third-party code on your system — proceed only if you trust the package source. If you need stricter control, run the nansen CLI manually outside the skill and paste results instead of granting an API key to the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk970vss9875ytgdhscxtx885vx833agc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsnansen
EnvNANSEN_API_KEY
Primary envNANSEN_API_KEY
Install
Node
Bins: nansen
npm i -g nansen-cli