Nansen Wallet Keychain Migration

• Analyzed: May 11, 2026, 7:45 AM
• Findings: 1
• Version: 0.1.0
• Hash: f9e551b504c5e725dca22dcca85341909879f14b366414e6af54a4d9c06b47d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to migrate Nansen wallet passwords from insecure files to an OS keychain, but it requires the agent to execute high-risk commands like 'nansen wallet export default', which outputs raw private keys to the terminal for verification purposes. While the instructions in SKILL.md explicitly forbid logging or storing passwords, the process of handling and displaying private keys within the agent's execution environment poses a significant risk of accidental exposure or exfiltration if the agent's logs are compromised.