lightning-channel-factories

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The GitHub repository is hosted under a numeric/unknown username and the project site is a personal/nonstandard domain that could distribute unvetted binaries, so these sources are higher risk than official vendor or well-established repos.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a technical reference specifically for Bitcoin/Lightning Network channel factory implementations. It explicitly references cryptographic signing primitives (MuSig2, Schnorr adaptor signatures), HTLC/PTLC forwarding, and mainnet/testnet support—capabilities directly tied to creating, signing, and routing on-chain/off-chain cryptocurrency transactions. These are specific crypto/blockchain execution capabilities (signing and transaction forwarding), so the skill grants direct financial execution capability.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 01:43 PM
Issues
2
Security Audit — snyk — lightning-channel-factories