registry / nansen-cli / 1.39.0
nansen-cli@1.39.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source establishes guarded first-party agent extension setup during postinstall, which the policy classifies as warning-only. The scanner's platform and dynamic-import signals do not independently establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A global npm installation with interactive input and stderr, followed by an answer that does not begin with n.
Impact
The installer can add a Nansen skill to a coding agent, changing its available instructions and capabilities.
Mechanism
The postinstall hook invokes npx skills add for nansen-ai/nansen-cli after a default-yes prompt.
AI rationale
Inspected source establishes guarded first-party agent extension setup during postinstall, which the policy classifies as warning-only. The scanner's platform and dynamic-import signals do not independently establish malicious behavior.
Evidence
package.jsonscripts/postinstall.js
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json automatically runs scripts/postinstall.js after installation.
- The install hook prompts to install a Nansen coding-agent skill, accepts an empty answer, and invokes npx skills add.
- The hook skips local npm installs and limits onboarding to interactive terminals.
- The platform check in src/doctor.js controls permission diagnostics; it does not establish sandbox evasion.
- src/x402.js dynamically imports the package's own wallet module for payment signing.
Evidence against
- No concrete malicious behavior was established in the inspected source.
- The agent skill setup is first-party and visibly prompted, which excludes the unconsented foreign-control-surface blocking rule.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
359patternName = generic_password
severity = medium
line = 359
Medium
Findings
3 High7 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/doctor.js
HighSemantic Analysis Limitedsrc/x402.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Cryptosrc/api.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to nansen-cli@1.39.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.39.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.