portless-local

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs the agent/user to add a local CA to the system trust store, modify /etc/hosts, and explicitly auto-elevates/uses sudo (including examples like sudo portless proxy start) to bind low ports — all of which change system-wide state and require elevated privileges.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 11, 2026, 04:22 AM
Issues
1
Security Audit — snyk — portless-local