fix-lightning

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to operate a Bitcoin Lightning node using the lnd/lncli tooling. It includes commands that create and move on‑chain/Lightning funds (e.g., lncli openchannel --local_amt=... --push_amt=..., lncli rebalancechannel --amount=..., lncli wtclient add ...) and therefore can initiate payments, channel opens, and rebalances. These are specific crypto/Blockchain financial operations (not generic automation), so this grants direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to run privileged commands (e.g., "sudo systemctl restart lnd"), modify service/config files (lnd.conf), and perform state-changing wallet/channel operations on the host, which require elevated privileges and modify the machine's state.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 08:57 PM