NEAR Protocol CLI installation and setup guide.

• Outcome: Review
• Latest audit: May 28, 2026 · 11:44 AM UTC
• Version: 1.0.0

Overview

This documentation-only skill is not clearly malicious, but it asks agents to help with high-impact NEAR blockchain actions and credential workflows without enough safety boundaries.

Install only if you want an agent helping with NEAR CLI work. Before allowing any command that sends, stakes, deploys, signs, imports, or exports accounts, confirm the exact account, network, recipient, amount, fees, and command text. Avoid sharing seed phrases or private keys in chat or logs, prefer testnet or low-value accounts first, and use verified installer downloads instead of piping remote scripts directly into a shell.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Rogue Agent: Self-Modification, Session Persistence

Findings (16)

Intent-Code Divergence

Medium

• Confidence: 84% confidence
• Finding: The skill is presented as an installation/setup guide, but its description explicitly expands scope to using NEAR CLI for arbitrary blockchain actions. That broader operational capability increases the chance an agent will perform sensitive wallet, account, or transaction actions beyond simple setup, which is risky in an installation-focused skill.

Context-Inappropriate Capability

Medium

• Confidence: 87% confidence
• Finding: The guide includes account import and account creation flows, which involve sensitive credentials and potentially state-changing blockchain operations. In a generic setup skill, this can prompt agents or users into handling seed phrases, keys, and funded account actions without strong consent boundaries or security warnings.

Missing User Warnings

Medium

• Confidence: 86% confidence
• Finding: The README documents credential import/export, token transfers, staking, contract deployment, and signed transaction submission without clear safety warnings about irreversible fund movement, secret handling, or the risk of acting on the wrong network/account. In an agent context, this increases the chance that an automated system executes high-impact blockchain actions without explicit human confirmation or operational safeguards.

Missing User Warnings

Medium

• Confidence: 98% confidence
• Finding: The documentation tells users to fetch a remote installer and execute it immediately via a shell pipe. This bypasses inspection, checksum/signature verification, and makes compromise of the upstream release channel or network path directly translate into arbitrary code execution.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The account import guidance references seed phrases or keys without any warning about their sensitivity. That omission can normalize unsafe handling of wallet secrets and increase the likelihood they are exposed in logs, chat transcripts, shell history, or to the agent itself.

Session Persistence

Medium

• Category: Rogue Agent

Content

# Import existing account
near account import-account

# Create new account
near account create-account

# Export account credentials

• Confidence: 72% confidence
• Finding: Create new account near account create-account # Export account credentials near account export-account ``` ### Token Operations ```bash # View NEAR balance near tokens <account-id> network-config m

External Script Fetching

Low

• Category: Supply Chain

Content

**Linux/macOS/WSL (recommended):**
```bash
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

**npm/npx (any platform with Node.js):**

• Confidence: 95% confidence
• Finding: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

External Script Fetching

Low

• Category: Supply Chain

Content

```bash
# Use longer timeout
curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 \
  https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

• Confidence: 95% confidence
• Finding: curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 \ https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

External Script Fetching

Low

• Category: Supply Chain

Content

**Best for:** Most Linux and macOS users

```bash
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

**if not add near to PATH:**

• Confidence: 97% confidence
• Finding: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

External Script Fetching

Low

• Category: Supply Chain

Content

**Solution:**
```bash
# Use a longer timeout with curl
curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

• Confidence: 97% confidence
• Finding: curl curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

External Script Fetching

Low

• Category: Supply Chain

Content

```bash
# Install (Shell script)
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

# Install (npx)
npx near-cli-rs

• Confidence: 97% confidence
• Finding: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

**Linux/macOS/WSL (recommended):**
```bash
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

**npm/npx (any platform with Node.js):**

• Confidence: 97% confidence
• Finding: | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

```bash
# Use longer timeout
curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 \
  https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

## 📚 Resources

• Confidence: 97% confidence
• Finding: | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

**Best for:** Most Linux and macOS users

```bash
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

**if not add near to PATH:**

• Confidence: 99% confidence
• Finding: | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

**Solution:**
```bash
# Use a longer timeout with curl
curl --proto '=https' --tlsv1.2 -LsSf --connect-timeout 30 --max-time 300 https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh
```

## Version Information

• Confidence: 99% confidence
• Finding: | sh

Chaining Abuse

High

• Category: Tool Misuse

Content

```bash
# Install (Shell script)
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

# Install (npx)
npx near-cli-rs

• Confidence: 99% confidence
• Finding: | sh

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.