cli-anything-eth2-quickstart

Warn

Audited by Snyk on Apr 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly focused on Ethereum validator/node operations and includes commands to update validator payment-related settings (e.g., --fee-recipient) and enable MEV workflows. Those are specific crypto/blockchain capabilities that can directly affect where block/validator rewards are routed. Even though it says it will not handle keys or sign transactions, the skill's primary, explicit domain is blockchain validator management and reward routing — a direct financial execution surface in the crypto context.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the agent to autonomously install execution/consensus clients and configure system-level components like Nginx/Caddy and RPC exposure—actions that modify system files and systemd services and therefore require elevated (sudo) privileges, so it poses a high risk of changing the machine state.

Issues (2)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 12:01 PM
Issues
2