setup-portless

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill tells the agent to perform system-wide changes (npm install -g) and explicitly suggests using sudo to start a proxy on privileged ports (e.g., sudo portless proxy start -p 80), which requests elevated privileges and can modify the host system state.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 08:04 PM