wallet-cli-usage

Warn

Audited by Snyk on Jul 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a Ledger wallet CLI explicitly designed to manage crypto funds: it lists supported networks (bitcoin, ethereum, solana) and provides concrete commands that move or authorize movement of money — e.g., send (create/sign/broadcast transactions), swap execute (execute cross-asset swaps with on-device signing), and earn deposit / earn withdraw (staking / vault deposits that sign transactions). These are direct financial execution operations (cryptocurrency wallet, signing, broadcasting, staking, swapping).

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to disable sandboxing ("dangerouslyDisableSandbox: true") for device and keyring commands and to request/perform a sandbox bypass, which directs the agent to bypass a security mechanism on the host.

Issues (2)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 27, 2026, 02:08 PM
Issues
2
Security Audit — snyk — wallet-cli-usage