registry / nansen-cli / 1.36.0
nansen-cli@1.36.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource confirms a prompted, default-affirmative postinstall agent-skill setup. Under policy this is a first-party package-owned extension lifecycle risk requiring a warning, not a malicious block.
Static reason
One or more suspicious static signals were detected.
Trigger
Global npm install in a TTY; user presses Enter or accepts the skill prompt.
Impact
May add a Nansen skill to an AI-agent skill directory via the external installer.
Mechanism
Postinstall spawns npx -y skills add nansen-ai/nansen-cli.
AI rationale
Source confirms a prompted, default-affirmative postinstall agent-skill setup. Under policy this is a first-party package-owned extension lifecycle risk requiring a warning, not a malicious block.
Evidence
package.jsonscripts/postinstall.jssrc/update-check.jssrc/telemetry.jssrc/api.jssrc/wallet.jssrc/index.js~/.nansen/config.json~/.claude/skills/nansen-cli~/.claude/skills/nansen-ai--nansen-cli
Network endpoints3
registry.npmjs.org/nansen-cli/latestapi.nansen.aibi-data-sources.nansen.ai/events-service-68ifmnpsx2uq7cgab8dw/v2/event
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- scripts/postinstall.js runs on global install and invokes npx skills add.
- Blank TTY response accepts installation of nansen-ai/nansen-cli.
- The install targets Claude skill locations indirectly via an external skill installer.
Evidence against
- Local installs exit before onboarding.
- Non-TTY installs only print tips.
- Postinstall uses argument-array spawning with shell:false.
- No hidden payload, credential exfiltration, or destructive filesystem behavior found in reviewed source.
- Runtime network use is aligned with Nansen API, telemetry, trading, and update checks.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
359patternName = generic_password
severity = medium
line = 359
matchedText = const pr...ps);
Medium
Findings
2 High7 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/update-check.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Cryptosrc/api.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nansen-cli@1.36.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.36.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.