registry / @goldskycom/cli / 13.8.0
@goldskycom/cli@13.8.0
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner conflates normal bundled dependencies and explicit CLI bootstrap behavior with malicious loading. Source inspection found no lifecycle execution or concrete unconsented malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `goldsky compose install` or invokes `goldsky turbo` and confirms installation.
Impact
User-approved installation of Goldsky CLI extensions; no malicious chain established.
Mechanism
Explicit CLI extension bootstrap and version checks
AI rationale
The scanner conflates normal bundled dependencies and explicit CLI bootstrap behavior with malicious loading. Source inspection found no lifecycle execution or concrete unconsented malicious behavior.
Evidence
package.jsonbin/goldskydist/index.js$HOME/.goldsky/bin/turbo$HOME/.goldsky/compose-update-check.json$HOME/.goldsky/turbo-update-check.json
Network endpoints3
compose.goldsky.com/installinstall-turbo.goldsky.com/stable/release.jsoninstall-turbo.goldsky.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/index.js exposes `goldsky compose install`, which runs a Goldsky-hosted curl-to-shell installer only on that explicit command.
- dist/index.js can install the Turbo extension after an interactive confirmation from `goldsky turbo`.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- bin/goldsky only loads dist/index.js when the user invokes the CLI.
- Remote checks fetch version JSON; source does not decode and execute fetched data.
- Telemetry is disclosed, opt-out capable, and sends anonymous CLI/system metadata to the package API.
- No source evidence of credential harvesting, broad file collection, AI-agent configuration mutation, or stealth persistence.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
12 flaggeddist/index.jsView file
1728`)}`,"error",n),n.message("Completing build...");let S=f.map(({id:_,chain:v,generated_subgraph_id:T})=>({id:_,chain:v,generated_bundle_id:T}));return[`${S.length} subgraph${S.lengt...
L1729: Wait a few minutes and use ${Df.default.bold("goldsky subgraph list")} to check the status of your deployments.`,"cancel",S):l0(`${v.error}: ${v.message} (${v.statusCode})`,"error"...
L1730: ${cb.default.goldsky.purple.bold((0,OE.resolve)(qn.targetPath))}`,cb.default.goldsky.orange.bold("Target path")),!i&&!await Qu(qn.targetPath)&&(await yy({message:`Target path '${qn...
...
L1737:
L1738: `)}}function ae(qn,pf=!1){let Wf=(qn||"").split(",").map(Qu=>Qu.trim());return pf?Wf:Wf.filter(Boolean)}function ft(qn){return qn.length<=2?qn.join(" and "):[qn.slice(0,-1).join(",...
L1739: --host ${e.url.su
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L17281Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var RWe=Object.create;var $I=Object.defineProperty;var kWe=Object.getOwnPropertyDescriptor;var PWe=Object.getOwnPropertyNames;var IWe=Object.getPrototypeOf,NWe=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function Gde(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5...
L6: `);return s!==-1&&(t=iKe(t,i,n,s)),n+t+i},n7,Jde=(e,...t)=>{let[r]=t;if(!qL(r)||!qL(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String...
L7: `;vh.DEFAULT_CONTENT_TYPE="application/octet-stream";vh.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=pK.prototype.append.bind
Findings
2 Critical7 High4 Medium6 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCloud Metadata Accessdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumDynamic Requiredist/index.js
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
Affected versions and remediation
This report applies to @goldskycom/cli@13.8.0.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.