cli-anything-eth2-quickstart
Warn
Audited by Snyk on Apr 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly focused on Ethereum validator/node operations and includes commands to update validator payment-related settings (e.g., --fee-recipient) and enable MEV workflows. Those are specific crypto/blockchain capabilities that can directly affect where block/validator rewards are routed. Even though it says it will not handle keys or sign transactions, the skill's primary, explicit domain is blockchain validator management and reward routing — a direct financial execution surface in the crypto context.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the agent to autonomously install execution/consensus clients and configure system-level components like Nginx/Caddy and RPC exposure—actions that modify system files and systemd services and therefore require elevated (sudo) privileges, so it poses a high risk of changing the machine state.
Issues (2)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata