registry / nansen-cli / 1.40.1
nansen-cli@1.40.1
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a first-party, prompted postinstall agent-extension setup rather than concrete malicious behavior. It warrants a warning under the lifecycle policy, not a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Interactive global npm postinstall; user accepts the skill prompt.
Impact
Adds a Nansen skill to an AI-agent skill location through the external installer.
Mechanism
Prompted `npx` installation of a package-owned AI skill.
AI rationale
This is a first-party, prompted postinstall agent-extension setup rather than concrete malicious behavior. It warrants a warning under the lifecycle policy, not a block.
Evidence
package.jsonscripts/postinstall.js~/.claude/skills/nansen-cli~/.claude/skills/nansen-ai--nansen-cli
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Global postinstall prompts to install a Nansen AI coding skill.
- Accepting the default prompt runs `npx -y skills add nansen-ai/nansen-cli`.
- The postinstall checks Claude skill directories, indicating agent-extension setup.
Evidence against
- Local installs return before onboarding.
- Non-TTY installs only print tips and do not run the skill command.
- No source evidence of credential exfiltration, remote payload execution, or broad agent-config writes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
359patternName = generic_password
severity = medium
line = 359
matchedText = const pr...ps);
Medium
Findings
4 High8 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Foreign Package Code Overwritesrc/api.js
HighSandbox Evasion Gated Capabilitysrc/doctor.js
HighPrevious Version Dangerous Deltasrc/update-check.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumDynamic Requiresrc/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Crypto
Affected versions and remediation
This report applies to nansen-cli@1.40.1.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.40.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.