registry / @skyforgeai/skyforge-darwin-x64-baseline / 3.8.2

@skyforgeai/skyforge-darwin-x64-baseline@3.8.2

SkyForge binary for darwin x64

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the SkyForge binary or explicitly starts the bundled MCP server and enables a tool.

Impact

An authorized user or connected MCP client could make ServiceNow changes through configured credentials; exposure depends on explicit runtime configuration.

Mechanism

User-mediated MCP execution of ServiceNow API administration tools.

Rationale

Source inspection does not support a malicious verdict; scanner claims of dynamic evaluation and remote execution were not confirmed as package self-execution. The broad, network-exposed MCP administration capability warrants a warning rather than a clean firewall verdict.

Evidence

package.jsonbin/sky-codemcp/nexus.jsmcp/nexus-http.js

Decision evidence

public snapshot

AI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`mcp/nexus.js` implements an MCP `tool_execute` path for enabled ServiceNow tools.
`mcp/nexus.js` contains ServiceNow script creation and optional syntax checks using `new Function` in generated target-platform code.
`mcp/nexus-http.js` starts an HTTP MCP server on `0.0.0.0` when explicitly run.
`mcp/nexus-http.js` writes generated tool-definition exports and report files during MCP operations.

Evidence against

`package.json` has no `preinstall`, `install`, `postinstall`, or other lifecycle script.
The only package bin is a user-invoked Mach-O executable: `bin/sky-code`.
Inspected `eval` matches are security-rule regexes that detect user-supplied ServiceNow scripts, not package self-execution.
No inspected source established remote payload download/decode/execute or credential exfiltration.
Claude configuration text in `mcp/nexus-http.js` is printed setup guidance; no config-file mutation was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 532 file(s), 23.7 MB of source, external domains: api.external.com, cdn.jsdelivr.net, cdnjs.cloudflare.com, company.atlassian.net, dev351277.service-now.com, dotenvx.com, github.com, goo.gl, json-schema.org, mermaid.live, oauth.provider.com, opencode.ai, openoffice.org, opensource.org, purl.oclc.org, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, schemas.zwobble.org, sheetjs.com, sheetjs.openxmlformats.org, skyforgeai.app, skyforgeai.gitbook.io, stuk.github.io, www.npmjs.com, www.w3.org, your-instance.service-now.com

Oversized source lightweight scan

mcp/nexus-http.js3.23 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsHighEntropyStringsUrlStringsapi.external.comcompany.atlassian.netdev351277.service-now.comgithub.comskyforgeai.gitbook.io

Source & flagged code

11 flagged

packages/app/dist/assets/cobol-nwyudZeR.jsView file

Lines 1-2javascript

1import e from"./html-GMplVEZG.js";import n from"./java-CylS5w8V.js";import"./javascript-wDzz0qaB.js";import"./css-DPfMkruS.js";const t=Object.freeze(JSON.parse(`{"displayName":"COBOL","fileTypes":["ccp","scbl","cobol","cbl","cblle","cblsrce","cblcpy","lks","pdv","cpy","copybook","cobcopy","fd","sel","scb","scbl","sqlcblle","cob","dds","def","src","ss","wks","bib","pco"],"name":"cobol","patterns":[{"match":"^([ *][ *][ *][ *][ *][ *])([Dd]\\\\s.*)$","name":"token.info-token.cobol"},{"captures":{"1":{"name":"constant.numeric.cobol"},"2":{"name":"comment.line.cobol.newpage"}},"match":"^([ *][ *][ ...

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

Long lines were clipped for display.

mcp/nexus.jsView file

2import{createRequire as Zc}from"node:module";var ap=Object.create;var{getPrototypeOf:sp,defineProperty:nY,getOwnPropertyNames:rp}=Object;var tp=Object.prototype.hasOwnProperty;func... L3: `:""},this._extScope=X,this._scope=new N4.Scope({parent:X}),this._nodes=[new MB]}toString(){return this._root.render(this.opts)}name(X){return this._scope.name(X)}scopeName(X){retu... L4: || (${G} == "string" && ${Z} && ${Z} == +${Z})`).assign(z,w0._`+${Z}`);return;case"integer":$.elseIf(w0._`${G} === "boolean" || ${Z} === null L5: || (${G} === "string" && ${Z} && ${Z} == +${Z} && !(${Z} % 1))`).assign(z,w0._`+${Z}`);return;case"boolean":$.elseIf(w0._`${Z} === "false" || ${Z} === 0 || ${Z} === null`).assign(z... L6: || ${G} === "boolean" || ${Z} === null`).assign(z,w0._`[${Z}]`)}}}function Ko({gen:X,parentData:Y,parentDataProperty:J},$){X.if(w0._`${Y} !== undefined`,()=>X.assign(w0._`${Y}[${J}... L7: missingProperty: ${$}, ... L14: */var V9=Gq(),p10=G0("path").extname,zq=/^\s*([^;\s]*)(?:;|\s|$)/,c10=/^text\//i;o10.charset=Kq;o10.charsets={lookup:Kq};o10.contentType=d10;o10.extension=i10;o10.extensions=Object... L15: `;S0.DEFAULT_CONTENT_TYPE="application/octet-stream";S0.prototype.append=func

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

50`);let $;while(($=nH0.exec(J))!=null){let Z=$[1],Q=$[2]||"";Q=Q.trim();let G=Q[0];if(Q=Q.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),G==='"')Q=Q.replace(/\\n/g,` L51: `),Q=Q.replace(/\\r/g,"\r");Y[Z]=Q}return Y}function oH0(X){X=X||{};let Y=dp(X);X.path=Y;let J=V1.configDotenv(X);if(!J.parsed){let G=Error(`MISSING_DATA: Cannot parse ${Y} for an ... L52: `).filter((Q)=>Q),$=Math.min(...J.map((Q)=>Q.length-Q.trimStart().length)),Z=J.map((Q)=>Q.slice($)).map((Q)=>" ".repeat(this.indent*2)+Q);for(let Q of Z)this.content.push(Q)}compil...

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.js

packages/app/dist/assets/session-eRe7mVtg.jsView file

Lines 20-47javascript

20 }

22 `)}h.write("payload.value = newResult;"),h.write("return payload;");const T=h.compile();return(j,w)=>T(p,j,w)};let o;const a=Or,c=!to.jitless,d=c&&Bu.value,g=n.catchall;let m;e._zod.parse=(p,h)=>{m??(m=i.value);const f=p.value;return a(f)?c&&d&&h?.async===!1&&h.jitless!==!0?(o||(o=t(n.shape)),p=o(p,h),g?Km([],f,p,h,m,e):p):r(p,h):(p.issues.push({expected:"object",code:"invalid_type",input:f,inst:e}),p)}});function uc(e,n,r,i){for(const o of e)if(o.issues.length===0)return n.value=o.value,n;const t=e.filter(o=>!dr(o));return t.length===1?(n.value=t[0].value,t[0]):(n.issues.push({code:"inv ...

24Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(const g

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133814160 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3384511 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3384511 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg

Source & flagged code

11 flagged · loading source

packages/app/dist/assets/cobol-nwyudZeR.jsView file

1import e from"./html-GMplVEZG.js";import n from"./java-CylS5w8V.js";import"./javascript-wDzz0qaB.js";import"./css-DPfMkruS.js";const t=Object.freeze(JSON.parse(`{"displayName":"COB...

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

mcp/nexus.jsView file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.jsView on unpkg · L50

42${w}`;return N.pop(),`{${D}}`}case"number":return isFinite(M)?String(M):Y?Y(M):"null";case"boolean":return M===!0?"true":"false";case"undefined":return;case"bigint":if($)return Str... L43: `))}},forFunctions(X,Y,J){J.forEach(($)=>{X[$]=KZ0.warn[Y]($)})},forProperties(X,Y,J){J.forEach(($)=>{let Z=KZ0.warn[Y]($);Object.defineProperty(X,$,{get:Z,set:Z})})}}});var Bh=f((... L44: `))};wX.prototype.close=function(){if(this.transport.close)this.transport.close();if(this.transport.__winstonError)this.transport.removeListener("error",this.transport.__winstonErr... L45: `).slice(1);return J.map(function($){if($.match(/^\s*[-]{4,}$/))return Y._createParsedCallSite({fileName:$,lineNumber:null,functionName:null,typeName:null,methodName:null,columnNum... ... L50: `);let $;while(($=nH0.exec(J))!=null){let Z=$[1],Q=$[2]||"";Q=Q.trim();let G=Q[0];if(Q=Q.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),G==='"')Q=Q.replace(/\\n/g,` L51: `),Q=Q.replace(/\\r/g,"\r");Y[Z]=Q}return Y}function oH0(X){X=X||{};let Y=dp(X);X.path=Y;let J=V1.configDotenv(X);if(!J.parsed){let G=Error(`MISSING_DATA: Cannot parse ${Y} for an ... L52: `).filter((Q)=>Q),$=Math.min(...J.map((Q)=>Q.length-Q.trimStart().length)),Z=J.map((

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

mcp/nexus.jsView on unpkg · L42

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

mcp/nexus.jsView on unpkg · L2

5|| (${G} === "string" && ${Z} && ${Z} == +${Z} && !(${Z} % 1))`).assign(z,w0._`+${Z}`);return;case"boolean":$.elseIf(w0._`${Z} === "false" || ${Z} === 0 || ${Z} === null`).assign(z... L6: || ${G} === "boolean" || ${Z} === null`).assign(z,w0._`[${Z}]`)}}}function Ko({gen:X,parentData:Y,parentDataProperty:J},$){X.if(w0._`${Y} !== undefined`,()=>X.assign(w0._`${Y}[${J}... L7: missingProperty: ${$},

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp/nexus.jsView on unpkg · L5

packages/app/dist/assets/session-eRe7mVtg.jsView file

40contains invisible/control Unicode U+202A (left-to-right embedding) \`\`\``}})),r}}))}});en.register({name:"edit",render(e){const n=Ct(),r=$o(),i=E(()=>Hp(e.metadata.diagnostics,e.input.filePath)),t=()=>qt(e.input.filePath??"");return s(Vt,ke(e,{icon:"code-lines",get trigger(){return(()=>{var o=zk(),a=o.fir

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

packages/app/dist/assets/session-eRe7mVtg.jsView on unpkg · L40

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133814160 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3384511 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3384511 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg

Findings

2 Critical7 High6 Medium5 Low

CriticalRemote Asset Decode Executemcp/nexus.js

CriticalTrojan Source Unicodepackages/app/dist/assets/session-eRe7mVtg.js

HighChild Processpackages/app/dist/assets/cobol-nwyudZeR.js

HighShell

HighEvalmcp/nexus.js

HighSame File Env Network Executionmcp/nexus.js

HighObfuscated Payload Loadermcp/nexus.js

HighShips High Entropy Blobpackages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2

HighOversized Source Filemcp/nexus-http.js

MediumDynamic Requiremcp/nexus.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarybin/sky-code

MediumOversized Cli Entrypointmcp/nexus-http.js

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

11 flagged

packages/app/dist/assets/cobol-nwyudZeR.jsView file

Lines 1-2javascript

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

Long lines were clipped for display.

mcp/nexus.jsView file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.js

packages/app/dist/assets/session-eRe7mVtg.jsView file

Lines 20-47javascript

20 }

24Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(const g

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133814160 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3384511 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3384511 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg