Dexscreener CLI

Query DexScreener API for token prices, market data, trending pools, and memecoin categories. Automatically installs @kilincarslan/dexscreener-cli if not pre...

Security Scan

The skill's instructions and requirements match its stated purpose (running a DexScreener CLI), but it auto-installs a third-party npm package globally which carries the usual supply-chain and privilege risks — verify the package before allowing installation.

Purpose & Capability

The skill is a wrapper for a DexScreener CLI: it documents CLI commands, JSON output parsing, and lists Node/npm as dependencies. Nothing requested (no credentials, no config paths) is unrelated to querying DexScreener.

Instruction Scope

Runtime instructions tell the agent to check for the 'dexscreener' CLI, install it via npm if missing, and run CLI commands then parse JSON. The instructions do not ask for unrelated files, env vars, or data exfiltration, but they do execute shell commands and globally install an npm package when the CLI is absent.

Install Mechanism

There is no platform install spec; the skill relies on an inline shell install: `which dexscreener || npm install -g @kilincarslan-enterprises/dexscreener-cli`. This is an npm scoped package (public registry) — a common but moderate-risk install mechanism because npm packages can run postinstall scripts and write files system-wide. The package and GitHub links are provided in SKILL.md, which helps traceability. Minor inconsistency: the skill header truncation mentions a slightly different package scope in one place, but the install line and links consistently point to @kilincarslan-enterprises/dexscreener-cli.

Credentials

The skill requires no environment variables or credentials and its instructions do not reference any hidden env vars. Node.js and npm are reasonable and proportional requirements for running an npm-based CLI.

Persistence & Privilege

The skill does not request 'always: true' or other elevated platform privileges. However, the auto-install command performs a global npm install, which writes to system-wide node_modules / binary directories and may require elevated permissions — this is expected for a CLI wrapper but increases the privilege/surface area and should be considered before allowing execution.

Assessment

This skill appears to do what it says: run the DexScreener CLI and parse JSON. The main risk is the inline global npm install (npm install -g @kilincarslan-enterprises/dexscreener-cli): global npm installs can run arbitrary postinstall scripts and modify system directories. Before installing, verify the npm package and maintainer (review the npm page and the GitHub repo linked in SKILL.md), consider installing the package in a controlled environment (or without -g into a sandboxed node environment), and ensure you are comfortable granting npm permission to write global modules. Also note a minor naming inconsistency in the skill header vs the install command; confirm the exact package name you expect to install. If you do not want the agent to run system package installs, disallow automatic execution or require manual install of the CLI first.

DexScreener Skill

Query token and market data from DexScreener API. This skill automatically installs and manages the DexScreener CLI tool.

Auto-Installation

The skill automatically installs @kilincarslan/dexscreener-cli if not found:

which dexscreener || npm install -g @kilincarslan-enterprises/dexscreener-cli

Usage Pattern

When user asks for DexScreener data:

1. Check/Install: Ensure CLI is available
2. Execute: Run appropriate dexscreener command
3. Parse: Process JSON output for the user

Commands Reference

Command	Description	Example
dexscreener search <query>	Search tokens by symbol/address	dexscreener search SOL
dexscreener token <chain>_<addr>	Token price, mcap, liquidity	dexscreener token base_0x...
dexscreener pair <chain>_<addr>	Pool/pair details	dexscreener pair base_0x...
dexscreener token-pairs <chain>_<addr>	All pairs for token	dexscreener token-pairs solana_...
dexscreener pools	Trending pools	dexscreener pools
dexscreener profiles	Boosted tokens	dexscreener profiles --type top
dexscreener recent-updates	Updated profiles	dexscreener recent-updates
dexscreener takeovers	Community takeovers	dexscreener takeovers
dexscreener ads	Latest ads	dexscreener ads
dexscreener orders <chain>_<addr>	Order book	dexscreener orders base_0x...
dexscreener txs <chain>_<pair>	Transactions	dexscreener txs base_0x...
dexscreener metas	Memecoin trends	dexscreener metas
dexscreener meta <slug>	Category details	dexscreener meta ai

Output Format

• JSON (default) — parse with jq or JSON.parse()
• Table — human readable (--format table or -f table)

Chain Format

chainId_tokenAddress — lowercase only:

• base_0x311935Cd80B76769bF2ecC9D8Ab7635b2139cf82
• solana_So11111111111111111111111111111111111111112
• ethereum_0x...

Common Patterns

Get token price

dexscreener token base_0x... | jq -r '.priceUsd'

Search and extract

dexscreener search SOL | jq '.[0] | {symbol: .baseToken.symbol, price: .priceUsd}'

Find top volume pool

dexscreener pools | jq 'max_by(.volume.h24) | {pair: .baseToken.symbol, vol24h: .volume.h24}'

Get trending metas

dexscreener metas | jq '.[].name'

Error Handling

• Exit code 0 = success
• Exit code non-0 = error (check stderr)
• Rate limit: 60 req/min (handled automatically)

Dependencies

• Node.js 18+
• npm (for global install)

Repository

https://github.com/Kilincarslan-Enterprises/dexscreener-cli

NPM Package

https://www.npmjs.com/package/@kilincarslan-enterprises/dexscreener-cli

License

MIT — Free to use, modify, and distribute