nansen-cli@2.4.0
AI-agent CLI for Nansen API analytics, DEX swaps, and cross-chain trading
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package sends runtime command telemetry by default, and perp events include a signer wallet hash. The located documentation discloses login/logout telemetry and an opt-out but does not describe these broader events, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Runs by default when users invoke most CLI commands; offline commands are excluded.
Impact
Nansen can associate command and trade activity with a persistent anonymous identifier and, for perp events, correlate activity to a wallet hash.
Mechanism
The CLI posts usage events to Nansen's telemetry endpoint. Perp outcome events include order details and a SHA-256 wallet address hash. An opt-out is available.
AI rationale
The package sends runtime command telemetry by default, and perp events include a signer wallet hash. The located documentation discloses login/logout telemetry and an opt-out but does not describe these broader events, so this warrants a warning rather than a block.
Evidence
src/telemetry.jssrc/cli.jsdocs/browser-login.md
Network endpoints1
bi-data-sources.nansen.ai/events-service-68ifmnpsx2uq7cgab8dw/v2/event
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Ordinary CLI commands send runtime usage events by default; offline commands are exempt.
- Perp trade events include order outcome details and a hash of the signer wallet address.
- The documentation describes login/logout telemetry and an opt-out, but does not describe general command or trade telemetry.
- The postinstall onboarding is limited to global installs and requires interactive prompts for skill installation and account verification.
Evidence against
- Telemetry can be disabled with DO_NOT_TRACK=1 or NANSEN_NO_TELEMETRY=1.
- The documented login/logout telemetry excludes tokens and private keys.
- The postinstall script offers optional steps rather than silently installing the skill or checking the account.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/wallet.jsView file
583patternName = generic_password
severity = medium
line = 583
Medium
905
Findings
4 High7 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitysrc/doctor.js
HighSemantic Analysis Limitedsrc/transfer.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/update-check.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsrc/wallet.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/wallet.js
MediumSecret Patternsrc/wallet.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to nansen-cli@2.4.0.
See all versions of nansen-cli for other recorded verdicts.
- Review the evidence and your use of nansen-cli@2.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.