registry / nansen-cli / 1.37.0
nansen-cli@1.37.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource supports a guarded first-party agent-extension lifecycle risk, not malicious behavior. The source lacks a concrete exfiltration, destructive, stealth-persistence, or foreign AI-control-surface attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Global npm installation with a TTY and a non-`n` response to the skill prompt.
Impact
Adds a package-owned AI-agent skill via an external installer if the user accepts.
Mechanism
Prompted first-party AI-skill installation through npx.
AI rationale
Source supports a guarded first-party agent-extension lifecycle risk, not malicious behavior. The source lacks a concrete exfiltration, destructive, stealth-persistence, or foreign AI-control-surface attack chain.
Evidence
package.jsonscripts/postinstall.jssrc/api.jssrc/update-check.jssrc/telemetry.jsskills/nansen-wallet-keychain-migration/SKILL.md~/.claude/skills/nansen-cli~/.claude/skills/nansen-ai--nansen-cli
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Global-install postinstall prompts to install a Nansen AI skill and invokes `npx -y skills add nansen-ai/nansen-cli` on acceptance.
- The lifecycle checks Claude skill paths, creating a first-party AI-agent extension lifecycle surface.
Evidence against
- Local installs and non-TTY environments do not invoke the skill installer.
- The command is fixed-argument with `shell: false`; no source evidence of credential exfiltration, destructive behavior, or foreign/broad agent-control writes.
- The runtime update check only fetches npm package version metadata and writes a local cache.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
359patternName = generic_password
severity = medium
line = 359
matchedText = const pr...ps);
Medium
Findings
3 High8 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Foreign Package Code Overwritesrc/api.js
HighPrevious Version Dangerous Deltasrc/update-check.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumDynamic Requiresrc/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Cryptosrc/api.js
LowFilesystem
Affected versions and remediation
This report applies to nansen-cli@1.37.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.37.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.