marginfi

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's lending/borrowing capabilities align with its stated purpose, and there is no visible malicious installer or exfiltration path. However, requiring a raw SOLANA_PRIVATE_KEY for a skill that can perform live financial transactions makes the trust burden high, especially since the actual implementation that handles the key is not shown.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Oct 19, 2026, 05:19 AM
Package URL
pkg:socket/skills-sh/alsk1992%2Fcloddsbot%2Fmarginfi%2F@8aae38435ce534391b808c1d86ea0774635ad0a7fdc6f53b3c23a87ba425a17b