Nansen Wallet Manager

• Outcome: Review
• Latest audit: May 29, 2026 at 9:28 PM UTC
• Version:
  0.1.1

Overview

This wallet skill is coherent, but it gives an agent high-impact wallet authority, including sending funds, exporting keys, and deleting wallets, without clear per-action approval safeguards.

Review before installing. Use only low-value or purpose-built wallets unless you fully trust the nansen-cli package and the environment. Require the agent to show the exact command and get explicit approval before any send, export, delete, or default-wallet change, prefer dry-run previews, and avoid environments where wallet credentials fall back to a local .credentials file.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill explicitly documents `nansen wallet export <name>`, which exposes private key material, but does not place an immediate high-visibility warning at the export command itself about the extreme sensitivity of exported secrets. In a wallet-management skill, agents may treat this as a routine operation and could surface or mishandle private keys in logs, outputs, or downstream tools, leading to full wallet compromise.

VirusTotal

65/65 vendors flagged this skill as clean.