@goldskycom/cli@13.10.0
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains a user-confirmed remote installer that pipes a Goldsky-hosted script into a shell. The scanner's claims of credential redirection and foreign-package overwrite were not supported by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the turbo CLI command and accepts its installation prompt.
Impact
A compromised installer host could execute code with the invoking user's privileges.
Mechanism
User-confirmed remote shell installer for a Goldsky extension.
AI rationale
The package contains a user-confirmed remote installer that pipes a Goldsky-hosted script into a shell. The scanner's claims of credential redirection and foreign-package overwrite were not supported by the inspected source.
Evidence
package.jsonbin/goldskydist/index.js~/.goldsky/bin/turbo
Network endpoints1
install-turbo.goldsky.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The turbo command downloads and executes a script from a Goldsky host through a shell.
- The remote installation occurs after an interactive confirmation.
- The installed executable is placed under the user's Goldsky directory.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The package entrypoint is a user-invoked CLI binary.
- The shell installation path is limited to the explicit turbo command and Goldsky-owned host.
- No source evidence shows credential harvesting, foreign package overwrite, or agent-control changes.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
13 flaggeddist/index.jsView file
1740`)}`,"error",n),n.message("Completing build...");let S=f.map(({id:_,chain:E,generated_subgraph_id:O})=>({id:_,chain:E,generated_bundle_id:O}));return[`${S.length} subgraph${S.lengt...
L1741: Wait a few minutes and use ${Df.default.bold("goldsky subgraph list")} to check the status of your deployments.`,"cancel",S):p0(`${E.error}: ${E.message} (${E.statusCode})`,"error"...
L1742: ${ub.default.goldsky.purple.bold((0,Pv.resolve)(qn.targetPath))}`,ub.default.goldsky.orange.bold("Target path")),!i&&!await Xu(qn.targetPath)&&(await Hg({message:`Target path '${qn...
...
L1749:
L1750: `)}}function ae(qn,df=!1){let Wf=(qn||"").split(",").map(Xu=>Xu.trim());return df?Wf:Wf.filter(Boolean)}function ft(qn){return qn.length<=2?qn.join(" and "):[qn.slice(0,-1).join(",...
L1751: --host ${e.url.su
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L17401Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var IKe=Object.create;var jI=Object.defineProperty;var NKe=Object.getOwnPropertyDescriptor;var $Ke=Object.getOwnPropertyNames;var FKe=Object.getPrototypeOf,BKe=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function mfe(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5...
L6: `);return s!==-1&&(t=aYe(t,i,n,s)),n+t+i},h7,_fe=(e,...t)=>{let[r]=t;if(!JL(r)||!JL(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String...
L7: `;wh.DEFAULT_CONTENT_TYPE="application/octet-stream";wh.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=EK.prototype.append.bind
Findings
2 Critical9 High3 Medium6 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCloud Metadata Accessdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
Medium
Affected versions and remediation
This report applies to @goldskycom/cli@13.10.0.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.