Ethereum Node

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Ethereum node management skill with disclosed, purpose-aligned local node commands, but users should be careful with external client installs, powerful RPC namespaces, and background node processes.

This skill appears safe to install for Ethereum node administration if you are comfortable running local node software. Keep RPC on localhost, avoid exposing admin/debug/trace namespaces publicly, and use trusted or pinned client releases when installing geth or reth.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If these RPC namespaces are exposed beyond localhost, others could inspect or influence the node.

Why it was flagged

The skill exposes powerful Ethereum RPC namespaces for diagnostics. This is purpose-aligned and accompanied by localhost-only warnings, but users should understand that these interfaces can manipulate or inspect the node.

Skill content
enable admin/debug namespaces when troubleshooting ... --http.api eth,net,web3,admin,debug,trace
Recommendation

Keep RPC bound to 127.0.0.1, do not expose admin/debug/trace over the network, and enable them only when needed.

What this means

Installing from an unpinned Git source may install a different version over time.

Why it was flagged

The documented install command pulls client code from a GitHub repository without pinning a specific commit or release. This is user-directed and relevant to the skill, but it depends on external upstream provenance.

Skill content
cargo install reth --git https://github.com/paradigmxyz/reth --locked
Recommendation

Prefer official releases or pin a known-good version or commit when installing Ethereum clients.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A background node can keep running, consuming disk, CPU, bandwidth, and exposing localhost RPC until stopped.

Why it was flagged

The skill documents starting an Ethereum node as a background process. This is expected for node administration and is not hidden, but it is persistent local activity that the user should intentionally manage.

Skill content
reth node --http --http.addr 127.0.0.1 --http.api eth,net,web3 &> reth.log 2>&1 &
Recommendation

Start the node only when intended, monitor resource use and logs, and stop it with the documented job or PID commands when finished.