registry / chain-insights / 0.8.22

chain-insights@0.8.22

AML investigation CLI and MCP proxy for blockchain risk, fund-flow tracing, workspace reports, and Chain Insights Graph access

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `chain-insights --claude`, `--codex`, or `--hermes` (or directly invokes bin/install.cjs with a flag).

Impact

Adds a package-controlled MCP command to a user-level AI-agent configuration and enables its payment-capable proxy.

Mechanism

explicit global agent-skill and MCP registration

Rationale

This is not malicious install-time behavior, but it is an explicit user-level AI-agent extension installer with a payment-capable proxy. Warn rather than block.

Evidence

package.jsonbin/install.cjsdist/cli.mjsbin/mcp-proxy.cjsdist/client-C_HEuq0f.mjsdist/wallet-BrTTnf7w.mjsskills/

Network endpoints5

127.0.0.1:8012/mcpmainnet.base.orgbase-rpc.publicnode.combase.drpc.org1rpc.io/base

chain-insights@0.8.22

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code