
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@speedkit/cli
Advanced tools
$ npm install -g @speedkit/cli
$ sk COMMAND
running command...
$ sk (--version)
@speedkit/cli/2.15.0 linux-x64 node-v20.11.1
$ sk --help [COMMAND]
USAGE
$ sk COMMAND
...
💡 NOTE:
Set up auto-completion for the CLI by executingsk autocomplete [SHELL]once.
There are two different ways of configuring the CLI:
On the first execution of any sk command a config.json will be created and stored to the current user's directory of your OS:
~/.config/speed-kit-cli/config.json%LOCALAPPDATA%\speed-kit-cli\config.json{
"chromePath": "", // local path to the Chrome binary
"chromeUserProfilePath": "", // local path to the Custom Chrome User Profile (use if you want to have Chrome's state saved)
"chromeExtensionPaths": "", // comma separated list of local paths to unpacked extensions for Chrome to load
"slackToken": "", // Slack token that will be injected to the deploymentDetection
"testApp": "", // name of your Test Speed Kit App
"ideaDirectory": "", // local directory path to the IntelliJ's shell binary
"diffExec": "", // path or executable of your favorite diff tool e.g. "vscode --diff", "codium --diff", "diff", "idea diff"
"diffExecTemplate": "" // defaults to "$exec $file1 $file2" resolves in "diff pathToFile1 pathToFile2"
}
By either...
.env to the directory of the cloned sk-onboardingsk autocomplete [SHELL]sk build-parameter-query CUSTOMERPATHsk build-prewarm-query CUSTOMERPATHsk deploy CUSTOMERPATHsk document-handler CUSTOMERPATHsk find-pops APPsk generate-customer-configsk generate-pop-config APPsk help [COMMAND]sk login [APP]sk onboarding CUSTOMERPATHsk param-diff PAGEURLsk pop-prewarm APPsk prewarm APP PATHsk pull CUSTOMERPATHsk wpt-launcher URLS TESTIDsk autocomplete [SHELL]Display autocomplete installation instructions.
USAGE
$ sk autocomplete [SHELL] [-r]
ARGUMENTS
SHELL (zsh|bash|powershell) Shell type
FLAGS
-r, --refresh-cache Refresh cache (ignores displaying instructions)
DESCRIPTION
Display autocomplete installation instructions.
EXAMPLES
$ sk autocomplete
$ sk autocomplete bash
$ sk autocomplete zsh
$ sk autocomplete powershell
$ sk autocomplete --refresh-cache
See code: @oclif/plugin-autocomplete
sk build-parameter-query CUSTOMERPATHBuild a parameter query that can be executed in Athena
USAGE
$ sk build-parameter-query CUSTOMERPATH [-c <value>]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-c, --configName=<value> [default: production] The costumer config name
DESCRIPTION
Build a parameter query that can be executed in Athena
EXAMPLES
$ sk build-parameter-query <customerPath> -c <configName>
$ sk build-parameter-query customer/decathlon.de -c production
sk build-prewarm-query CUSTOMERPATHBuild a prewarm query that can be executed in Athena
USAGE
$ sk build-prewarm-query CUSTOMERPATH [-c <value>]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-c, --configName=<value> [default: production] The costumer config name
DESCRIPTION
Build a prewarm query that can be executed in Athena
EXAMPLES
$ sk build-prewarm-query <customerPath> -c <configName>
$ sk build-prewarm-query customer/decathlon.de -c production
sk deploy CUSTOMERPATHDeploys the specified customer config while comparing to the live version before
USAGE
$ sk deploy CUSTOMERPATH [-c <value>] [-a <value>] [-d] [-t <value>]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-a, --artifacts=<value> Whitelist of files to deploy
-c, --configName=<value> [default: production] The costumer config name
-d, --dryRun Do not deploy changes
-t, --slackToken=<value> Slack hook found on 1Pass
DESCRIPTION
Deploys the specified customer config while comparing to the live version before
EXAMPLES
$ sk deploy <customerPath> -c <configName> -t <slackToken> -a <artifacts> -d <dryRun>
$ sk deploy customer/decathlon.de -c production -t someSlackToken -a dynamic,SpeedKit -d
sk document-handler CUSTOMERPATHCreates testable documentHandler in folder {CUSTOMER_PATH}/test/src/
USAGE
$ sk document-handler CUSTOMERPATH [-c <value>] [-t <value>]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-c, --configName=<value> [default: production] The costumer config name
-t, --CreateTests=<value>... name of the test to create
DESCRIPTION
Creates testable documentHandler in folder {CUSTOMER_PATH}/test/src/
EXAMPLES
$ sk documentHandler <customerPath> -c <configName>
$ sk deploy customer/decathlon.de -c production
sk find-pops APPGet IPs for all fastly PoPs
USAGE
$ sk find-pops APP [-i <value>]
ARGUMENTS
APP The customers appName
FLAGS
-i, --ips=<value> [default: 151.101.x.194]
DESCRIPTION
Get IPs for all fastly PoPs
EXAMPLES
$ sk find-pops <app> -i <ips>
$ sk find-pops appName -i ips
sk generate-customer-configGenerates a customer config guided by a wizard 🧙
USAGE
$ sk generate-customer-config [-a <value>] [-d <value>]
FLAGS
-a, --app=<value> The SK app name which is also being used the config output directory name (kebab-case)
-d, --customersDir=<value> Name of the sk-onboarding directory where all customer configs are being stored (default:
"customers")
DESCRIPTION
Generates a customer config guided by a wizard 🧙
EXAMPLES
$ sk generate-customer-config -a <app> -d <customersDir>
$ sk generate-customer-config -a decathlon -d customers
sk generate-pop-config APPGenerate a pop config for the given app
USAGE
$ sk generate-pop-config APP [-c <value>] [-d] [-p <value>] [-t <value>] [-r]
ARGUMENTS
APP The customers appName
FLAGS
-c, --coverage=<value> [default: 95] The percentage of traffic which should be covered through prewarming.
-d, --[no-]deploy Default it diffs with the deployed config and ask for deployment. If the flag is passed
deployment will be skipped or forced.
-p, --pop-limit=<value> [default: 5] The maximal pop count which should prewarmed.
-r, --use-rum Compute the pop statistics based on RUM. Otherwise the real Speed Kit traffic is used.
-t, --traffic-share=<value> [default: 5] The minimum traffic share in percent a pop must have to be actually
prewarmed.
DESCRIPTION
Generate a pop config for the given app
EXAMPLES
$ sk generate-pop-config <app>
$ sk generate-pop-config --use-rum <app>
$ sk generate-pop-config --coverage 95 appName
$ sk generate-pop-config --no-deploy appName
$ sk generate-pop-config --deploy appName
$ sk generate-pop-config --coverage 95 --pop-limit 6 --traffic-share 2 --deploy appName
sk help [COMMAND]Display help for sk.
USAGE
$ sk help [COMMAND] [-n]
ARGUMENTS
COMMAND Command to show help for.
FLAGS
-n, --nested-commands Include all nested commands in the output.
DESCRIPTION
Display help for sk.
See code: @oclif/plugin-help
sk login [APP]Login to your app
USAGE
$ sk login [APP]
ARGUMENTS
APP [default: bbq] The customers appName
DESCRIPTION
Login to your app
EXAMPLES
$ sk login <app>
$ sk login appName
sk onboarding CUSTOMERPATHStart a local dev environment for building and testing the Speed Kit configuration
USAGE
$ sk onboarding CUSTOMERPATH [-c <value>] [-l] [-v]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-c, --configName=<value> [default: production] The costumer config name
-l, --local Run with local documentHandler
-v, --verboseLevel Show all messages
DESCRIPTION
Start a local dev environment for building and testing the Speed Kit configuration
EXAMPLES
$ sk onboarding <customerPath> -c <configName>
$ sk onboarding customer/decathlon.de -c production
sk param-diff PAGEURLShows difference in documents with query parameters on/off
USAGE
$ sk param-diff PAGEURL [-h]
ARGUMENTS
PAGEURL Link of the page
FLAGS
-h, --hideDiff Hide the code diff in IDE code diff window
DESCRIPTION
Shows difference in documents with query parameters on/off
EXAMPLES
$ sk prewarm <pageUrl> -h
$ sk prewarm https://www.decathlon.de/ -h
sk pop-prewarm APPPre-warm Fastly PoPs
USAGE
$ sk pop-prewarm APP [-i <value>] [-c <value>]
ARGUMENTS
APP The customers appName
FLAGS
-c, --contentTypes=<value> [default: image]
-i, --ips=<value> [default: 151.101.120.194]
DESCRIPTION
Pre-warm Fastly PoPs
EXAMPLES
$ sk pop-prewarm <app> -c <contentTypes> -i <ips>
$ sk pop-prewarm decathlon -c image,style -i 151.101.120.194
sk prewarm APP PATHPre-warm Fastly
USAGE
$ sk prewarm APP PATH [-p <value> | -v <value>] [-d <value>] [-k]
ARGUMENTS
APP The customer app name
PATH path to prewarmFile
FLAGS
-d, --delay=<value> Request delay in ms
-k, --keepParameterSorting Prevents alphabetical sorting of the URL parameters
-p, --variationPath=<value>
-v, --variation=<value> [default: DEFAULT]
DESCRIPTION
Pre-warm Fastly
EXAMPLES
for a single variation:
$ sk prewarm <app> <path> -v <variation> -d <delay> -k
$ sk prewarm decathlon C:\Users\testUser\file.csv -v MOBILE -d 1200 -k
for a list of variations:
$ sk prewarm <app> <path> -p <variationPath> -d <delay> -k
$ sk prewarm decathlon C:\Users\testUser\file.csv -p C:\Users\testUser\variations.csv -d 1200 -k
sk pull CUSTOMERPATHPull the specified customer config from orestes
USAGE
$ sk pull CUSTOMERPATH [-c <value>]
ARGUMENTS
CUSTOMERPATH The customer config path
FLAGS
-c, --configName=<value> [default: production] The costumer config name
DESCRIPTION
Pull the specified customer config from orestes
EXAMPLES
$ sk pull <customerPath>
$ sk pull customer/decathlon.de -c production
sk wpt-launcher URLS TESTIDAnalyze the performance impact that Speed Kit has compared to the original version.
USAGE
$ sk wpt-launcher URLS TESTID [-c <value>] [-m <value>] [-g <value>]
FLAGS
-c, --cookies=<value>
-g, --group=<value> [default: A]
-m, --mobile=<value> [default: no]
DESCRIPTION
Analyze the performance impact that Speed Kit has compared to the original version.
EXAMPLES
$ sk wpt-launcher <urls> <testId> -g <group> -m <mobile> -c <cookies>
$ sk wpt-launcher url1,url2,url3 listing-50vs50 -g B -m Y -c consentCookies
FAQs
Speed Kit CLI
The npm package @speedkit/cli receives a total of 188 weekly downloads. As such, @speedkit/cli popularity was classified as not popular.
We found that @speedkit/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.