registry / @goldskycom/cli / 13.13.0
@goldskycom/cli@13.13.0
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe high-risk primitives are package-aligned, user-invoked CLI functionality rather than automatic or covert behavior. The manifest has no install lifecycle hook, and inspection found no malicious credential or payload flow.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user explicitly runs a Turbo or Compose installation command.
Impact
The selected installer can execute its vendor-hosted installation script; no automatic installation or covert payload execution was found.
Mechanism
User-invoked vendor CLI extension installation.
AI rationale
The high-risk primitives are package-aligned, user-invoked CLI functionality rather than automatic or covert behavior. The manifest has no install lifecycle hook, and inspection found no malicious credential or payload flow.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI can invoke a remote Turbo installer only after the user runs the Turbo command and accepts its prompt.
- The Compose installer is reached only through the explicit `goldsky compose install` subcommand.
- The manifest exposes a CLI entry point and contains no npm install lifecycle hook.
Evidence against
- No install-time execution, self-dependency, credential harvesting, or covert exfiltration was found.
- The flagged eval and Function uses are bundled dependency internals, not a flow that fetches and executes a hidden payload.
- Telemetry removes authentication before sending and redacts the token option from recorded commands.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggeddist/index.jsView file
1815L1816: `)}}}function bKe(e){let t=Math.floor(e);if(t<60)return Cf.default.dim(`00:${t<10?"0":""}${t}`);let r=Math.floor(t/60),n=t-r*60;return Cf.default.dim(`${r<10?"0":""}${r}:${n<10?"0"...
L1817: [ERROR]`),U),o.message(Cf.default.goldsky.red(O))});if(v){let O=await i(o,`abis/${f.normalizedName}.json`,JSON.stringify(v,null,2));c.add(O),g.abi=await cj(O)}else{o.message("Unabl...
...
L1829:
L1830: `)}}function ae(qn,df=!1){let Kf=(qn||"").split(",").map(Zu=>Zu.trim());return df?Kf:Kf.filter(Boolean)}function ft(qn){return qn.length<=2?qn.join(" and "):[qn.slice(0,-1).join(",...
L1831: The ${mj.default.bold("turbo")} binary is not installed.
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L18151Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var LJe=Object.create;var aN=Object.defineProperty;var jJe=Object.getOwnPropertyDescriptor;var MJe=Object.getOwnPropertyNames;var UJe=Object.getPrototypeOf,qJe=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function _me(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5...
L6: `);return s!==-1&&(t=dQe(t,i,n,s)),n+t+i},J7,Ame=(e,...t)=>{let[r]=t;if(!vj(r)||!vj(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String...
L7: `;Ch.DEFAULT_CONTENT_TYPE="application/octet-stream";Ch.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=iY.prototype.append.bind
Critical
Findings
2 Critical9 High4 Medium6 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighCloud Metadata Accessdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumDynamic Require
Affected versions and remediation
This report applies to @goldskycom/cli@13.13.0.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.