registry / @goldskycom/cli / 13.9.0
@goldskycom/cli@13.9.0
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic hints overstate a prompted, user-invoked CLI extension installer. Source inspection found no install lifecycle hook or concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User invokes `goldsky turbo` and confirms the installation prompt.
Impact
Installs a Goldsky Turbo binary only after user confirmation; no covert install-time behavior was found.
Mechanism
Prompted same-vendor remote installer invocation.
AI rationale
Static hints overstate a prompted, user-invoked CLI extension installer. Source inspection found no install lifecycle hook or concrete malicious chain.
Evidence
package.jsonbin/goldskydist/index.js
Network endpoints1
install-turbo.goldsky.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The remote installer is reachable only through the user-invoked `goldsky turbo` command and an interactive confirmation.
- The package exposes a normal CLI bin entrypoint; its manifest has no npm install lifecycle hook.
Evidence against
- No credential harvesting, foreign-package overwrite, hidden payload decoding, or AI-agent control-surface mutation was confirmed.
- The observed shell execution installs a same-vendor Goldsky Turbo component after a visible prompt; it is package-aligned rather than covert.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsMinifiedUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
13 flaggeddist/index.jsView file
1733`)}`,"error",n),n.message("Completing build...");let S=f.map(({id:_,chain:E,generated_subgraph_id:O})=>({id:_,chain:E,generated_bundle_id:O}));return[`${S.length} subgraph${S.lengt...
L1734: Wait a few minutes and use ${Df.default.bold("goldsky subgraph list")} to check the status of your deployments.`,"cancel",S):p0(`${E.error}: ${E.message} (${E.statusCode})`,"error"...
L1735: ${ub.default.goldsky.purple.bold((0,Pv.resolve)(qn.targetPath))}`,ub.default.goldsky.orange.bold("Target path")),!i&&!await Xu(qn.targetPath)&&(await Hg({message:`Target path '${qn...
...
L1742:
L1743: `)}}function ae(qn,df=!1){let Wf=(qn||"").split(",").map(Xu=>Xu.trim());return df?Wf:Wf.filter(Boolean)}function ft(qn){return qn.length<=2?qn.join(" and "):[qn.slice(0,-1).join(",...
L1744: --host ${e.url.su
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L17331Trigger-reachable chain: manifest.main -> dist/index.js
L1: "use strict";var DKe=Object.create;var jI=Object.defineProperty;var OKe=Object.getOwnPropertyDescriptor;var AKe=Object.getOwnPropertyNames;var TKe=Object.getPrototypeOf,RKe=Object....
L2: `:`
...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function dfe(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5...
L6: `);return s!==-1&&(t=eYe(t,i,n,s)),n+t+i},m7,Sfe=(e,...t)=>{let[r]=t;if(!JL(r)||!JL(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];for(let s=1;s<r.length;s++)i.push(String...
L7: `;wh.DEFAULT_CONTENT_TYPE="application/octet-stream";wh.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=wK.prototype.append.bind
Findings
2 Critical9 High3 Medium6 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighCloud Metadata Accessdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
Medium
Affected versions and remediation
This report applies to @goldskycom/cli@13.9.0.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.