nansen-cli@1.43.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malware behavior or unconsented install-time control-surface mutation was found. The explicit AI-client configuration capability warrants a warning under the stated policy.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs nansen mcp install for a supported client after configuring an API key.
Impact
The configured AI client can send the stored API key to the Nansen MCP service.
Mechanism
Writes a merge-only MCP server entry containing the API key.
AI rationale
No concrete malware behavior or unconsented install-time control-surface mutation was found. The explicit AI-client configuration capability warrants a warning under the stated policy.
Evidence
src/commands/mcp.js~/.claude.json~/.cursor/mcp.jsonLibrary/Application Support/Claude/claude_desktop_config.json
Network endpoints1
mcp.nansen.ai
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit MCP install command writes an API key into AI-client configuration files.
- The installed server entry sends that key to the fixed Nansen MCP endpoint.
- Global postinstall prompts before running an optional external skill installer.
Evidence against
- The MCP configuration change requires an explicit user command and a configured API key.
- The installer preserves other MCP entries and writes configurations atomically with restrictive permissions.
- Postinstall skips local installs and only prints tips without a terminal.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
Findings
3 High8 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/doctor.js
HighSemantic Analysis Limitedpackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumDynamic Requiresrc/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowWeak Cryptosrc/api.js
LowFilesystem
Low
Affected versions and remediation
This report applies to nansen-cli@1.43.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@1.43.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.