Is Kraken CLI safe? Security scan and tools

Log in / Join

Kraken CLI

By Kraken· kraken.com

PluginExtensionsClaude pluginsCrypto & Web3 Scan passed

Get

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

When a server changes its tools

Nothing new reaches your agent until a person has looked at it.

1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.

Scanned on every change, and again when our rules improve.

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

Browse plugins, skills and use-case recipes by category.

All categories

Kraken CLI

By Kraken· kraken.com

PluginExtensionsClaude pluginsCrypto & Web3 Scan passed

Get

Passed

Safe to install in every agent it supports. Extensions, Claude plugins.

Download report (JSON)

Last scan: 6 h ago
Version scanned: latest
Tools pinned: —

What we checked

We read the listing and its manifest for latest. 6 checks, no findings.

Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed

1 note that don’t affect the result

NotePipes a download into a shellRC-001

Runs whatever a URL returns, with no chance to read it first. Description, line 11

…th Kraken's one-line installer (macOS and Linux; on Windows use WSL): curl --proto '=https' --tlsv1.2 -LsSf https://github.com/krakenfx/kraken-cli/releases/latest/download/kraken-cli-installer.sh | sh - In Gemini CLI: gemini extensions install https://github.com/krakenf…

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 25, 2026 · First scanVersion 0.4.1 · no findings
Passed

Every rescan is logged, even when nothing changed.

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

When a server changes its tools

Nothing new reaches your agent until a person has looked at it.

1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.

Scanned on every change, and again when our rules improve.

History

Every scan of this listing, newest first.

Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 25, 2026 · First scanVersion 0.4.1 · no findings
Passed

Every rescan is logged, even when nothing changed.

Passed

Safe to install in every agent it supports. Extensions, Claude plugins.

Download report (JSON)

Last scan: 6 h ago
Version scanned: latest
Tools pinned: —

What we checked

We read the listing and its manifest for latest. 6 checks, no findings.

Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed

1 note that don’t affect the result

NotePipes a download into a shellRC-001

Runs whatever a URL returns, with no chance to read it first. Description, line 11

…th Kraken's one-line installer (macOS and Linux; on Windows use WSL): curl --proto '=https' --tlsv1.2 -LsSf https://github.com/krakenfx/kraken-cli/releases/latest/download/kraken-cli-installer.sh | sh - In Gemini CLI: gemini extensions install https://github.com/krakenf…

Tool changes

—

Pinned tool set

What the live server says it can do.

This one runs on your machine, so we can’t ask it for its tools without running it. We scan its listing and manifest instead.

What we checked

Pinned tool set

History

About

Ratings and reviews

Kraken CLI

What we checked

Pinned tool set

History

When a server changes its tools

What we checked

Pinned tool set

History

Browse plugins, skills and use-case recipes by category.

Kraken CLI

What we checked

What we checked

Pinned tool set

History

History

When a server changes its tools

History

What we checked

Pinned tool set

What we checked

Pinned tool set

History

About

Ratings and reviews

Security of Kraken CLI

What we checked

Pinned tool set

History

When a server changes its tools

What we checked

Pinned tool set

History

Browse plugins, skills and use-case recipes by category.

Security of Kraken CLI

What we checked

What we checked

Pinned tool set

History

History

When a server changes its tools

History

What we checked

Pinned tool set