wallet-cli-usage
Warn
Audited by Snyk on Jul 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a Ledger wallet CLI explicitly designed to manage crypto funds: it lists supported networks (bitcoin, ethereum, solana) and provides concrete commands that move or authorize movement of money — e.g.,
send(create/sign/broadcast transactions),swap execute(execute cross-asset swaps with on-device signing), andearn deposit/earn withdraw(staking / vault deposits that sign transactions). These are direct financial execution operations (cryptocurrency wallet, signing, broadcasting, staking, swapping).
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to disable sandboxing ("dangerouslyDisableSandbox: true") for device and keyring commands and to request/perform a sandbox bypass, which directs the agent to bypass a security mechanism on the host.
Issues (2)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata