nansen-wallet-keychain-migrationClawHub · nansen-devops

1,446 installs · ★0

Migrate an existing nansen-cli wallet from insecure password storage (env files, .credentials) to the new secure keychain-backed flow.

Reads secret paths (~/.ssh, .env …)Grants itself unrestricted tools

Credentials it expects: NANSEN_API_KEY

Evidence lines

reads_secret_paths — SKILL.md: - User mentions they stored their password in `~/.nansen/.env`, a `.env` file, or `memory.md`
reads_secret_paths — SKILL.md: # 3. Legacy pattern doctor does not cover: password written to ~/.nansen/.env
reads_secret_paths — SKILL.md: ls -la ~/.nansen/.env 2>/dev/null && echo "FOUND: ~/.nansen/.env (insecure)"
reads_secret_paths — SKILL.md: ### Path A: Password in `~/.nansen/.env` (old skill pattern)
reads_secret_paths — SKILL.md: The previous wallet skill told agents to write the password to `~/.nansen/.env`.
broad_tool_grant — SKILL.md: allowed-tools: Bash(nansen:*)

Registry's own scan (clawhub): suspicious on 2026-09-29 — their verdict, not ours. Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: clawhub.ai/nansen-devops/skills/nansen-wallet-keychain-migration.

Install

openclaw skills install nansen-devops/nansen-wallet-keychain-migration

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

4 weekly observations since 2026-09-28. Installs 1224 → 1446.

The skill's content changed 1 time(s): 2026-10-05. A changed SKILL.md is the security signal that matters — re-read it.

Cite this page

Sato Hub. "nansen-wallet-keychain-migration — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/clawhub%3Anansen-devops%2Fnansen-wallet-keychain-migration

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.