skills/bankrbot/skills/Why Ethereum/Gen Agent Trust Hub

Why Ethereum

Warn

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The catalog.json file contains an install.command field that executes curl -s https://ethskills.com/why/SKILL.md, representing an automated or suggested shell command execution to fetch remote content.
  • [EXTERNAL_DOWNLOADS]: The setup block in catalog.json suggests installing external software via claude plugin install https://github.com/austintgriffith/ethskills and clawhub install ethskills. These operations involve downloading and executing code from external, non-verified third-party repositories.
  • [DATA_EXFILTRATION]: The skill performs network operations to the domain ethskills.com which is not on the standard whitelist of trusted services.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 19, 2026, 01:18 PM
Security Audit — agent-trust-hub — Why Ethereum