botchain-nodes
Fail
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download code from an external repository located at
https://github.com/bl-BOHR/node-deploy.git. This source is not a recognized trusted provider. - [COMMAND_EXECUTION]: The instructions command the agent to change file permissions to executable (
chmod +x) for several scripts and binaries, includingBOHR_full_node.sh,BOHR_archive_node.sh, andbin/geth*. - [REMOTE_CODE_EXECUTION]: The skill directs the execution of the downloaded third-party scripts (
./BOHR_full_node.sh reset), which can lead to arbitrary code execution on the host machine. The skill notes the repository is currently a 404, but still retains the logic for execution.
Recommendations
- AI detected serious security threats
Audit Metadata