
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
Trade-intelligence CLI for coding agents. B2B prospect discovery, contact enrichment, outreach with stage tracking, tariff + HS-code lookups, OFAC sanctions screening, trade corridor management, per-company negotiation memory.
Trade-intelligence CLI for coding agents. B2B prospect discovery, contact enrichment, outreach with stage tracking, tariff + HS-code lookups, OFAC sanctions screening, trade corridor management, per-company negotiation memory.
npm i -g eximagent
# or (zero-dependency binary, no Node):
curl -fsSL https://install.eximagent.ai | sh
eximagent login # device flow (browser)
eximagent login --token <pat> # personal access token
The canonical skill is served from the backend and can be dropped into your host agent’s skill path:
eximagent skill > ~/.claude/skills/eximagent/SKILL.md # Claude Code
eximagent skill > AGENTS.md # Codex
eximagent skill > .cursor/rules/eximagent.mdc # Cursor
Or via the open agent-skills directory:
npx skills add EximAgent/cli
Trade-domain primitives, ~60 commands across:
profile get / extract / update — user trade profile (defaults, signature, target markets, products)search run / refine — autonomous buyer/importer discovery pipeline; materializes a Collectioncollection get / list / clone / stats — Collection CRUD + AI columnsenrich company / contacts / contact — company crawl + decision-maker contact enrichmentemail draft / send / cancel / history / followup — outreach with per-recipient timezone + language + stage trackingtemplate generate / save / list / edit / recall — email templates with {{variables}} + file attachmentskb add / list / remove / preview — knowledge-base files for outreach contexttariff / hscode search / country resolve / company / trade lookup — trade-data Q&Acorridor save / list / remove — recurring trade lanes as @corridor:<name> mentionssanctions check — OFAC SDN screeningcompanyMemory get — per-company negotiation memoryreminder / monitor — scheduled signal-driven remindersAll output is NDJSON on stdout. Typed errors on stderr. --stream flag for long-running commands.
UNLICENSED. See LICENSE.
FAQs
Trade-intelligence CLI for coding agents. B2B prospect discovery, contact enrichment, outreach with stage tracking, tariff + HS-code lookups, OFAC sanctions screening, trade corridor management, per-company negotiation memory.
The npm package eximagent receives a total of 5 weekly downloads. As such, eximagent popularity was classified as not popular.
We found that eximagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.