kamino

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The SKILL.md documents a DeFi SDK that explicitly constructs, signs, and sends on-chain financial transactions on Solana. It includes wallet/keypair usage and functions to deposit, borrow, repay, withdraw, liquidate, open/close leveraged positions, create obligation orders, manage strategy deposits/withdrawals, and call sendAndConfirmTransaction. These are specific crypto/blockchain financial execution primitives (wallet signing + submitting transactions), not generic utilities—so the skill grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 12:31 AM
Issues
1
Security Audit — snyk — kamino