goldrush-cli
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
@covalenthq/goldrush-clivianpx, which fetches and executes the CLI tool from the official vendor namespace on the NPM registry. - [COMMAND_EXECUTION]: The skill's primary functionality is delivered through terminal commands such as
goldrush balancesandgoldrush watch. Thegoldrush installcommand automates the modification of local configuration files to register the tool as an MCP server for AI agents. - [CREDENTIALS_UNSAFE]: The skill implements secure authentication via the
goldrush authcommand, which stores API keys in the operating system's secure keychain rather than in environment variables or configuration files, adhering to security best practices.
Audit Metadata