borrow-integration

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). This skill is explicitly for building and reviewing Morpho borrow/loan features (borrow-against-collateral, fixed/variable-rate borrowing) and references live orderbooks, transaction flows, and SDKs/CLIs used to perform or validate on-chain/state-changing actions. It explicitly mentions single-signature borrow flows, bundling approvals ("Supply-collateral + borrow in a single signature", "one-signature borrow", "approvals collapsed via permit/bundler") and directs use of Morpho APIs/SDKs (Morpho GraphQL API, morpho-cli, Morpho MCP server, @morpho-org/blue-sdk, midnight-sdk) for live quotes, required collateral, and math tied to execution. Because the primary and explicit purpose is to implement financial operations that create and manage loans/borrows (including signing/approving transactions), this grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 26, 2026, 07:18 PM
Issues
1
Security Audit — snyk — borrow-integration