@goldskycom/cli@13.18.1
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe CLI discloses and allows users to disable its telemetry, but runtime reports include command arguments and failure messages. The rules classify telemetry carrying command arguments as suspicious even when disclosed; the other flagged behaviors were not established as attacks.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Automatically when the CLI runs a command and reports success or failure.
Impact
Command arguments and error messages may reveal user or project details; no credential theft was established.
Mechanism
The CLI sends event properties with random anonymous identifiers and machine details to Goldsky’s telemetry API.
AI rationale
The CLI discloses and allows users to disable its telemetry, but runtime reports include command arguments and failure messages. The rules classify telemetry carrying command arguments as suspicious even when disclosed; the other flagged behaviors were not established as attacks.
Evidence
dist/index.jsbin/goldsky
Network endpoints1
api.goldsky.com/api/public/telemetry/v1/cli
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI enables telemetry by default on first use, prints a notice, and offers an opt-out and disable command.
- Command telemetry includes the command arguments; failed commands also report the error message.
- Telemetry is sent to Goldsky’s API with random anonymous and session IDs, plus platform and machine details.
- The manifest has no install lifecycle script, and the executable simply loads the CLI bundle.
Evidence against
- The telemetry is disclosed and can be disabled.
- The inspected source did not establish credential theft, unrelated code execution, or another malicious attack.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggeddist/index.jsView file
1782`)}var IGe=[Zf.default.bold("Cache behavior"),` ${Zf.default.green("cached")} block by height/hash, tx by hash, receipts, bounded eth_getLogs`,` ${Zf.default.dim("forwarded")...
L1783: `);async function C0(){let e=await jM();if(e.boost===null)throw new Error("Boost is not reachable right now");return e.boost}async function eE(){let[e,t]=await Qe.get(`${sg}/chains...
L1784:
...
L1792: Arguments:
L1793: version Version to update to (default: "stable"). Accepts "stable", "latest", or a semver version.`)}function S4e(e,t){let r=g4e(t);h4e(e,r)}function x4e(e,t){let r=_2(v2(e));dle(...
L1794: Install with: ${ple.default.cyan.bold(`goldsky ${e.name} install`)}`),process.exit(1));let l=d4e(e,s);if(l===0&&MM()){let c=T4e(e);c&&A4e(e.name,c.current,c.latest)}l!==0&&process....
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L17821Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var Zhe=Object.create;var TC=Object.defineProperty;var Xhe=Object.getOwnPropertyDescriptor;var ege=Object.getOwnPropertyNames;var tge=Object.getPrototypeOf,rge=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function WG(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5|...
L6: `);return s!==-1&&(t=Ege(t,i,n,s)),n+t+i},ZF,XG=(e,...t)=>{let[r]=t;if(!kC(r)||!kC(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String(...
L7: `;Mf.DEFAULT_CONTENT_TYPE="application/octet-stream";Mf.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=aL.prototype.append.bind
Findings
2 Critical10 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighEvaldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
Affected versions and remediation
This report applies to @goldskycom/cli@13.18.1.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.18.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.