jupiter-lend

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated Jupiter Lend purpose and uses official same-org npm/docs sources, so it does not look malicious or like credential harvesting. However, it enables autonomous DeFi borrowing/lending/flashloan actions with real financial consequences and includes raw local keypair handling in examples, making it a high-security-risk skill despite benign provenance.

Confidence: 92%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 02:30 PM
Package URL
pkg:socket/skills-sh/jup-ag%2Fagent-skills%2Fjupiter-lend%2F@3494efd2d28976ba177a344ea7ff6077742e8eca0914565481028b5ed907989f