registry / @skyforgeai/skyforge-darwin-x64-baseline / 3.8.0

@skyforgeai/skyforge-darwin-x64-baseline@3.8.0

SkyForge binary for darwin x64

AI Security Review

scanned 14h ago · by lpm-firewall-ai

No install-time execution occurs. Invoking the packaged CLI/MCP servers can load configured ServiceNow credentials and execute enabled administrative tools against the user-selected ServiceNow instance.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `skyforge` or starts an MCP server and invokes an enabled tool.

Impact

Authorized users can perform broad remote ServiceNow changes, including activating plugins or creating script artifacts.

Mechanism

credential-backed ServiceNow MCP administration and code-generation tools

Rationale

Not malicious by source facts: there are no lifecycle hooks or confirmed unauthorized payload/exfiltration path. Warn because the package bundles an opaque native executable and MCP tools with high-impact credential-backed remote administration capability.

Evidence

package.jsonmcp/nexus.jsmcp/nexus-http.jspackages/app/dist/assets/session-eRe7mVtg.jsbin/sky-code

Decision evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`mcp/nexus.js` exposes MCP tools that can modify ServiceNow plugins and records.
`mcp/nexus-http.js` reads ServiceNow credentials from request headers or local `auth.json` paths.
Both MCP bundles include user-triggered ServiceNow API clients and artifact export/write operations.
`bin/sky-code` is a 127 MB native Mach-O executable, limiting static source visibility.

Evidence against

`package.json` defines no preinstall, install, postinstall, or prepare hook.
No package-controlled exfiltration endpoint was confirmed.
Dynamic `new Function` occurrences generate user-requested ServiceNow script templates; no remote payload decode-and-execute chain was found.
The flagged UI Unicode is ordinary zero-width editor handling, not hidden control-flow text.
Local `.skyforge/skyforge-metrics.log` use is package-owned metrics storage.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 532 file(s), 23.7 MB of source, external domains: api.external.com, cdn.jsdelivr.net, cdnjs.cloudflare.com, company.atlassian.net, dev351277.service-now.com, dotenvx.com, github.com, goo.gl, json-schema.org, mermaid.live, oauth.provider.com, opencode.ai, openoffice.org, opensource.org, purl.oclc.org, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, schemas.zwobble.org, sheetjs.com, sheetjs.openxmlformats.org, skyforgeai.app, skyforgeai.gitbook.io, stuk.github.io, www.npmjs.com, www.w3.org, your-instance.service-now.com

Oversized source lightweight scan

mcp/nexus-http.js3.20 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsHighEntropyStringsUrlStringsapi.external.comcompany.atlassian.netdev351277.service-now.comgithub.comskyforgeai.gitbook.io

Source & flagged code

11 flagged

packages/app/dist/assets/cobol-nwyudZeR.jsView file

Lines 1-2javascript

1import e from"./html-GMplVEZG.js";import n from"./java-CylS5w8V.js";import"./javascript-wDzz0qaB.js";import"./css-DPfMkruS.js";const t=Object.freeze(JSON.parse(`{"displayName":"COBOL","fileTypes":["ccp","scbl","cobol","cbl","cblle","cblsrce","cblcpy","lks","pdv","cpy","copybook","cobcopy","fd","sel","scb","scbl","sqlcblle","cob","dds","def","src","ss","wks","bib","pco"],"name":"cobol","patterns":[{"match":"^([ *][ *][ *][ *][ *][ *])([Dd]\\\\s.*)$","name":"token.info-token.cobol"},{"captures":{"1":{"name":"constant.numeric.cobol"},"2":{"name":"comment.line.cobol.newpage"}},"match":"^([ *][ *][ ...

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

Long lines were clipped for display.

mcp/nexus.jsView file

2import{createRequire as tp}from"node:module";var cp=Object.create;var{getPrototypeOf:ip,defineProperty:uY,getOwnPropertyNames:dp}=Object;var np=Object.prototype.hasOwnProperty;func... L3: `:""},this._extScope=X,this._scope=new O4.Scope({parent:X}),this._nodes=[new KB]}toString(){return this._root.render(this.opts)}name(X){return this._scope.name(X)}scopeName(X){retu... L4: || (${G} == "string" && ${z} && ${z} == +${z})`).assign(Q,x0._`+${z}`);return;case"integer":$.elseIf(x0._`${G} === "boolean" || ${z} === null L5: || (${G} === "string" && ${z} && ${z} == +${z} && !(${z} % 1))`).assign(Q,x0._`+${z}`);return;case"boolean":$.elseIf(x0._`${z} === "false" || ${z} === 0 || ${z} === null`).assign(Q... L6: || ${G} === "boolean" || ${z} === null`).assign(Q,x0._`[${z}]`)}}}function Jo({gen:X,parentData:Y,parentDataProperty:J},$){X.if(x0._`${Y} !== undefined`,()=>X.assign(x0._`${Y}[${J}... L7: missingProperty: ${$}, ... L14: */var G9=Xq(),D10=z0("path").extname,Yq=/^\s*([^;\s]*)(?:;|\s|$)/,_10=/^text\//i;E10.charset=Jq;E10.charsets={lookup:Jq};E10.contentType=I10;E10.extension=v10;E10.extensions=Object... L15: `;j0.DEFAULT_CONTENT_TYPE="application/octet-stream";j0.prototype.append=func

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

50`);let $;while(($=TW0.exec(J))!=null){let z=$[1],Z=$[2]||"";Z=Z.trim();let G=Z[0];if(Z=Z.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),G==='"')Z=Z.replace(/\\n/g,` L51: `),Z=Z.replace(/\\r/g,"\r");Y[z]=Z}return Y}function _W0(X){X=X||{};let Y=mp(X);X.path=Y;let J=K1.configDotenv(X);if(!J.parsed){let G=Error(`MISSING_DATA: Cannot parse ${Y} for an ... L52: `).filter((Z)=>Z),$=Math.min(...J.map((Z)=>Z.length-Z.trimStart().length)),z=J.map((Z)=>Z.slice($)).map((Z)=>" ".repeat(this.indent*2)+Z);for(let Z of z)this.content.push(Z)}compil...

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.js

packages/app/dist/assets/session-eRe7mVtg.jsView file

Lines 20-47javascript

20 }

22 `)}h.write("payload.value = newResult;"),h.write("return payload;");const T=h.compile();return(j,w)=>T(p,j,w)};let o;const a=Or,c=!to.jitless,d=c&&Bu.value,g=n.catchall;let m;e._zod.parse=(p,h)=>{m??(m=i.value);const f=p.value;return a(f)?c&&d&&h?.async===!1&&h.jitless!==!0?(o||(o=t(n.shape)),p=o(p,h),g?Km([],f,p,h,m,e):p):r(p,h):(p.issues.push({expected:"object",code:"invalid_type",input:f,inst:e}),p)}});function uc(e,n,r,i){for(const o of e)if(o.issues.length===0)return n.value=o.value,n;const t=e.filter(o=>!dr(o));return t.length===1?(n.value=t[0].value,t[0]):(n.issues.push({code:"inv ...

24Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(const g

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133434384 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3358194 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3358194 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg

Source & flagged code

11 flagged · loading source

packages/app/dist/assets/cobol-nwyudZeR.jsView file

1import e from"./html-GMplVEZG.js";import n from"./java-CylS5w8V.js";import"./javascript-wDzz0qaB.js";import"./css-DPfMkruS.js";const t=Object.freeze(JSON.parse(`{"displayName":"COB...

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

mcp/nexus.jsView file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.jsView on unpkg · L50

42${w}`;return N.pop(),`{${D}}`}case"number":return isFinite(O)?String(O):Y?Y(O):"null";case"boolean":return O===!0?"true":"false";case"undefined":return;case"bigint":if($)return Str... L43: `))}},forFunctions(X,Y,J){J.forEach(($)=>{X[$]=u$0.warn[Y]($)})},forProperties(X,Y,J){J.forEach(($)=>{let z=u$0.warn[Y]($);Object.defineProperty(X,$,{get:z,set:z})})}}});var Qh=f((... L44: `))};q3.prototype.close=function(){if(this.transport.close)this.transport.close();if(this.transport.__winstonError)this.transport.removeListener("error",this.transport.__winstonErr... L45: `).slice(1);return J.map(function($){if($.match(/^\s*[-]{4,}$/))return Y._createParsedCallSite({fileName:$,lineNumber:null,functionName:null,typeName:null,methodName:null,columnNum... ... L50: `);let $;while(($=TW0.exec(J))!=null){let z=$[1],Z=$[2]||"";Z=Z.trim();let G=Z[0];if(Z=Z.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),G==='"')Z=Z.replace(/\\n/g,` L51: `),Z=Z.replace(/\\r/g,"\r");Y[z]=Z}return Y}function _W0(X){X=X||{};let Y=mp(X);X.path=Y;let J=K1.configDotenv(X);if(!J.parsed){let G=Error(`MISSING_DATA: Cannot parse ${Y} for an ... L52: `).filter((Z)=>Z),$=Math.min(...J.map((Z)=>Z.length-Z.trimStart().length)),z=J.map((

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

mcp/nexus.jsView on unpkg · L42

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

mcp/nexus.jsView on unpkg · L2

5|| (${G} === "string" && ${z} && ${z} == +${z} && !(${z} % 1))`).assign(Q,x0._`+${z}`);return;case"boolean":$.elseIf(x0._`${z} === "false" || ${z} === 0 || ${z} === null`).assign(Q... L6: || ${G} === "boolean" || ${z} === null`).assign(Q,x0._`[${z}]`)}}}function Jo({gen:X,parentData:Y,parentDataProperty:J},$){X.if(x0._`${Y} !== undefined`,()=>X.assign(x0._`${Y}[${J}... L7: missingProperty: ${$},

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp/nexus.jsView on unpkg · L5

packages/app/dist/assets/session-eRe7mVtg.jsView file

40contains invisible/control Unicode U+202A (left-to-right embedding) \`\`\``}})),r}}))}});en.register({name:"edit",render(e){const n=Ct(),r=$o(),i=E(()=>Hp(e.metadata.diagnostics,e.input.filePath)),t=()=>qt(e.input.filePath??"");return s(Vt,ke(e,{icon:"code-lines",get trigger(){return(()=>{var o=zk(),a=o.fir

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

packages/app/dist/assets/session-eRe7mVtg.jsView on unpkg · L40

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133434384 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3358194 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3358194 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg

Findings

2 Critical7 High6 Medium5 Low

CriticalRemote Asset Decode Executemcp/nexus.js

CriticalTrojan Source Unicodepackages/app/dist/assets/session-eRe7mVtg.js

HighChild Processpackages/app/dist/assets/cobol-nwyudZeR.js

HighShell

HighEvalmcp/nexus.js

HighSame File Env Network Executionmcp/nexus.js

HighObfuscated Payload Loadermcp/nexus.js

HighShips High Entropy Blobpackages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2

HighOversized Source Filemcp/nexus-http.js

MediumDynamic Requiremcp/nexus.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarybin/sky-code

MediumOversized Cli Entrypointmcp/nexus-http.js

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

11 flagged

packages/app/dist/assets/cobol-nwyudZeR.jsView file

Lines 1-2javascript

High

Child Process

Package source references child process execution.

packages/app/dist/assets/cobol-nwyudZeR.jsView on unpkg · L1

Long lines were clipped for display.

mcp/nexus.jsView file

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

mcp/nexus.jsView on unpkg · L2

High

Eval

Package source references dynamic code evaluation.

mcp/nexus.js

packages/app/dist/assets/session-eRe7mVtg.jsView file

Lines 20-47javascript

20 }

24Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(const g

bin/sky-codeView file

•path = bin/sky-code kind = native_binary sizeBytes = 133434384 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/sky-codeView on unpkg

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

packages/app/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

mcp/nexus-http.jsView file

•path = mcp/nexus-http.js kind = oversized_source_file sizeBytes = 3358194 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

mcp/nexus-http.jsView on unpkg

•path = mcp/nexus-http.js kind = oversized_cli_entrypoint sizeBytes = 3358194 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

mcp/nexus-http.jsView on unpkg