fix-lightning
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to operate a Bitcoin Lightning node using the lnd/lncli tooling. It includes commands that create and move on‑chain/Lightning funds (e.g., lncli openchannel --local_amt=... --push_amt=..., lncli rebalancechannel --amount=..., lncli wtclient add ...) and therefore can initiate payments, channel opens, and rebalances. These are specific crypto/Blockchain financial operations (not generic automation), so this grants direct financial execution capability.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to run privileged commands (e.g., "sudo systemctl restart lnd"), modify service/config files (lnd.conf), and perform state-changing wallet/channel operations on the host, which require elevated privileges and modify the machine's state.
Audit Metadata