cardano-cli-transactions
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- COMMAND_EXECUTION (MEDIUM): The wrapper script 'scripts/cardano-cli.sh' executes commands via 'exec' and passes user/agent arguments directly to the process. It mounts the host's current working directory ('$PWD') into the container at '/work', creating a surface for the container to access local files.\n- EXTERNAL_DOWNLOADS (MEDIUM): The skill pulls the 'ghcr.io/intersectmbo/cardano-node' Docker image at runtime. While this is the standard image for Cardano development, it is an external dependency from a source not listed in the trusted organizations list, warranting review before use.
Audit Metadata