registry / @goldskycom/cli / 13.18.0
@goldskycom/cli@13.18.0
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest has no install-time lifecycle hook, and the launcher only loads the CLI bundle. The inspected token flow targets the Goldsky API, while Turbo installation is user-invoked or prompted; the scanner's credential-redirection and remote-payload labels are not established by these source paths.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Normal CLI use authenticates with Goldsky; Turbo installation requires invoking its command or accepting the installation prompt.
Impact
No unauthorized credential transfer or automatic remote payload execution was established.
Mechanism
The CLI validates a bearer token with its configured API host and stores it locally. Turbo setup fetches an installer or binary from a Goldsky host after user action.
AI rationale
The manifest has no install-time lifecycle hook, and the launcher only loads the CLI bundle. The inspected token flow targets the Goldsky API, while Turbo installation is user-invoked or prompted; the scanner's credential-redirection and remote-payload labels are not established by these source paths.
Network endpoints2
api.goldsky.cominstall-turbo.goldsky.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists build, development, documentation, lint, and test scripts; it declares no install-time lifecycle hook.
- The executable launcher only loads dist/index.js.
- The CLI defaults authentication to api.goldsky.com in production; it validates bearer tokens against that API host and stores a valid token in the user's .goldsky directory.
- Turbo setup is user-invoked or follows an affirmative install prompt; its installer uses Goldsky's install host and writes the binary to the user's .goldsky/bin directory.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
14 flaggeddist/index.jsView file
1751`)}var AGe=[Zf.default.bold("Cache behavior"),` ${Zf.default.green("cached")} block by height/hash, tx by hash, receipts, bounded eth_getLogs`,` ${Zf.default.dim("forwarded")...
L1752: `);async function C0(){let e=await FM();if(e.boost===null)throw new Error("Boost is not reachable right now");return e.boost}async function Xw(){let[e,t]=await Qe.get(`${sg}/chains...
L1753:
...
L1761: Arguments:
L1762: version Version to update to (default: "stable"). Accepts "stable", "latest", or a semver version.`)}function m4e(e,t){let r=p4e(t);u4e(e,r)}function h4e(e,t){let r=v2(x2(e));ule(...
L1763: Install with: ${cle.default.cyan.bold(`goldsky ${e.name} install`)}`),process.exit(1));let l=o4e(e,s);if(l===0&&qM()){let c=_4e(e);c&&D4e(e.name,c.current,c.latest)}l!==0&&process....
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L17511Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var Yhe=Object.create;var EC=Object.defineProperty;var Qhe=Object.getOwnPropertyDescriptor;var Zhe=Object.getOwnPropertyNames;var Xhe=Object.getPrototypeOf,ege=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function zG(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5|...
L6: `);return s!==-1&&(t=Dge(t,i,n,s)),n+t+i},QF,ZG=(e,...t)=>{let[r]=t;if(!CC(r)||!CC(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String(...
L7: `;Mf.DEFAULT_CONTENT_TYPE="application/octet-stream";Mf.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=sL.prototype.append.bind
Findings
3 Critical10 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighEvaldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltration
Affected versions and remediation
This report applies to @goldskycom/cli@13.18.0.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.