botchain-nodes

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The GitHub URLs point to an unknown repository used to distribute deployment scripts/executables (and the skill even notes the repo is currently unreachable/404); unknown GitHub repos distributing install scripts are a high-risk source for malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's INSTALL/usage instructions explicitly run "git clone https://github.com/bl-BOHR/node-deploy.git" and then execute scripts from that repo, meaning remote code from https://github.com/bl-BOHR/node-deploy.git would be fetched and executed at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about running a geth-based blockchain node and includes wallet/key guidance and RPC flags that enable transaction operations. It references JSON-RPC exposure (port 8545), flags like --rpc.allow-unprotected-txs and --rpc.txfeecap, and enables APIs (eth, txpool, etc.), and notes validator signing keys and miner start/stop. Those are specific crypto/blockchain execution capabilities (wallets/signing and transaction submission), so this grants direct financial execution authority.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly tells operators to "register geth as a service" (systemd) and uses system paths like /server for datadir/config, which implies modifying system-level service/config files that require elevated privileges and can change machine state.