borrow-integration
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly for building and reviewing Morpho borrow/loan features (borrow-against-collateral, fixed/variable-rate borrowing) and references live orderbooks, transaction flows, and SDKs/CLIs used to perform or validate on-chain/state-changing actions. It explicitly mentions single-signature borrow flows, bundling approvals ("Supply-collateral + borrow in a single signature", "one-signature borrow", "approvals collapsed via permit/bundler") and directs use of Morpho APIs/SDKs (Morpho GraphQL API, morpho-cli, Morpho MCP server, @morpho-org/blue-sdk, midnight-sdk) for live quotes, required collateral, and math tied to execution. Because the primary and explicit purpose is to implement financial operations that create and manage loans/borrows (including signing/approving transactions), this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata