registry / nansen-cli / 1.36.1
nansen-cli@1.36.1
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package has a real install-time AI-agent extension capability, so it warrants a warning under the lifecycle policy. Source inspection found no concrete malicious behavior or unconsented broad control-surface mutation.
Static reason
One or more suspicious static signals were detected.
Trigger
Global npm install with a TTY; user accepts the onboarding prompt or presses Enter.
Impact
Installs a first-party AI-agent extension through npx; this is lifecycle-risky but disclosed and vendor-aligned.
Mechanism
Prompted postinstall execution of npx skills add nansen-ai/nansen-cli.
AI rationale
The package has a real install-time AI-agent extension capability, so it warrants a warning under the lifecycle policy. Source inspection found no concrete malicious behavior or unconsented broad control-surface mutation.
Evidence
package.jsonscripts/postinstall.jssrc/update-check.jssrc/telemetry.jssrc/keychain.jssrc/wallet.js~/.claude/skills/nansen-cli~/.claude/skills/nansen-ai--nansen-cli~/.nansen
Network endpoints3
registry.npmjs.org/nansen-cli/latestapi.nansen.aibi-data-sources.nansen.ai/events-service-68ifmnpsx2uq7cgab8dw/v2/event
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- package.json defines postinstall.
- scripts/postinstall.js runs npx skills add nansen-ai/nansen-cli on global TTY installs after a prompt whose blank answer accepts.
- The postinstall targets AI-agent skill locations under ~/.claude/skills.
Evidence against
- Postinstall skips local installs and non-TTY mode only prints guidance.
- Skill installation is disclosed, interactive, and package/vendor-aligned.
- Network use is explicit CLI functionality: Nansen API, npm update check, and opt-out telemetry.
- Wallet/keychain access is limited to ~/.nansen and user-invoked wallet/trading operations; no exfiltration found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
359patternName = generic_password
severity = medium
line = 359
matchedText = const pr...ps);
Medium
Findings
2 High7 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/update-check.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Cryptosrc/api.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nansen-cli@1.36.1.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.36.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.