registry / gaoding-cli / 1.0.0-alpha.13
gaoding-cli@1.0.0-alpha.13
Gaoding command-line interface for agents and people.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is an automatic first-party agent-extension setup across detected hosts, which warrants a warning under policy. Source inspection does not establish malicious behavior or a blocking payload chain.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm or pnpm global installation satisfying postinstall environment checks
Impact
Adds package-owned instructions to available AI-agent skill surfaces.
Mechanism
postinstall copies or links a packaged Agent Skill into detected host skill directories
AI rationale
This is an automatic first-party agent-extension setup across detected hosts, which warrants a warning under policy. Source inspection does not establish malicious behavior or a blocking payload chain.
Evidence
package.jsondist/bin/postinstall.jsdist/src/features/skill/installer.jsdist/src/features/skill/bundled-skills.jsdist/src/platform/url-safety.jsskills/gd-cli$HOME/.agents/skills/gd-cli$HOME/.claude/skills/gd-cli$HOME/.codex/skills/gd-cli$HOME/.cursor/skills/gd-cli
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Global postinstall automatically syncs bundled Agent Skills.
- Skill sync targets detected Claude, Codex, Cursor and other agent-host skill directories.
Evidence against
- Lifecycle is gated to npm/pnpm global installs or a narrow pnpm path.
- Only the packaged gd-cli skill is installed; conflicts halt rather than overwrite unknown directories.
- No install-time network, credential harvesting, or remote payload execution found.
- Runtime endpoints are Gaoding APIs; metadata and private-address URLs are blocked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "const p='./dist/bin/postinstall.js'; if (require('node:fs').existsSync(p)) import(p)"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const p='./dist/bin/postinstall.js'; if (require('node:fs').existsSync(p)) import(p)"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/src/features/dam/object-storage.jsView file
12try {
L13: const url = new URL(value.includes("://") ? value : `https://${value}`);
L14: if (url.protocol !== "http:" && url.protocol !== "https:") {
...
L128: .update(stringToSign)
L129: .digest("base64");
L130: const stream = createReadStream(input.filePath);
...
L140: },
L141: body: stream,
L142: signal: input.signal,
Findings
1 Critical4 High3 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitydist/src/features/update/update-service.js
HighCloud Metadata Accessdist/src/platform/url-safety.js
HighKnown Malware Source Similaritydist/src/features/update/update-service.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/src/features/dam/object-storage.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to gaoding-cli@1.0.0-alpha.13.
See all versions of gaoding-cli for other recorded verdicts.
- Review the evidence and your use of gaoding-cli@1.0.0-alpha.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.