liquidium-borrow

Warn

Audited by Snyk on Oct 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents decentralized finance (DeFi) lending and borrowing workflows via the Liquidium SDK and CLI (borrow/supply/repay/portfolio, instant-create, max-borrow), which constitute direct financial operations (loans, borrowing, repayments, and collateral transfers). However, the skill explicitly operates as an SDK wrapper and client-side CLI that does not sign messages, broadcast transactions, or handle private keys itself ("It does not sign messages or broadcast wallet transactions; use wallet tools only after explicit user confirmation", SKILL.md:53). It lacks any built-in execution layer or independent service-side authentication mechanism for managing funds; all actual fund transfers or transaction broadcasts require external user wallet actions and explicit confirmation.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 7, 2026, 09:01 PM
Issues
1