lightning-channel-factories
Fail
Audited by Snyk on Aug 10, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The GitHub repository is hosted under a numeric/unknown username and the project site is a personal/nonstandard domain that could distribute unvetted binaries, so these sources are higher risk than official vendor or well-established repos.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a technical reference specifically for Bitcoin/Lightning Network channel factory implementations. It explicitly references cryptographic signing primitives (MuSig2, Schnorr adaptor signatures), HTLC/PTLC forwarding, and mainnet/testnet support—capabilities directly tied to creating, signing, and routing on-chain/off-chain cryptocurrency transactions. These are specific crypto/blockchain execution capabilities (signing and transaction forwarding), so the skill grants direct financial execution capability.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata