registry / nansen-cli / 2.2.0
nansen-cli@2.2.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 27d ago · by lpm-firewall-aiSource inspection found an install hook limited to gated onboarding and an MCP setup command that operates on supported client configuration files only when explicitly invoked. The network and credential-related findings align with CLI API, transfer, and MCP setup functions; no malicious behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall invokes onboarding; MCP configuration changes require running the MCP install or uninstall command.
Impact
No confirmed malicious effect or unconsented agent configuration change was established.
Mechanism
The hook skips local installs and noninteractive runs only print tips; interactive steps prompt before acting. MCP setup writes a Nansen entry to a supported client config after requiring an API key.
AI rationale
Source inspection found an install hook limited to gated onboarding and an MCP setup command that operates on supported client configuration files only when explicitly invoked. The network and credential-related findings align with CLI API, transfer, and MCP setup functions; no malicious behavior was identified.
Evidence
~/.claude.json~/.cursor/mcp.jsonClaude Desktop configuration
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips local installs, prints tips without a TTY, and asks before optional skill installation or an account check.
- MCP configuration paths are limited to named client config files; MCP installation runs only through an explicit CLI subcommand and requires an API key.
- Doctor connectivity checks make an unauthenticated GET to the configured API base URL.
- Transfer RPC requests send JSON-RPC calls to the selected URL; this is consistent with the package's blockchain transfer functions.
Evidence against
- The package declares a postinstall hook, which merits inspection, but its observed actions are gated or informational.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
444patternName = generic_password
severity = medium
line = 444
Medium
749
Findings
3 High7 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/doctor.js
HighSemantic Analysis Limitedsrc/transfer.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to nansen-cli@2.2.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@2.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.