liquidium-borrow
Warn
Audited by Snyk on Oct 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents decentralized finance (DeFi) lending and borrowing workflows via the Liquidium SDK and CLI (
borrow/supply/repay/portfolio,instant-create,max-borrow), which constitute direct financial operations (loans, borrowing, repayments, and collateral transfers). However, the skill explicitly operates as an SDK wrapper and client-side CLI that does not sign messages, broadcast transactions, or handle private keys itself ("It does not sign messages or broadcast wallet transactions; use wallet tools only after explicit user confirmation", SKILL.md:53). It lacks any built-in execution layer or independent service-side authentication mechanism for managing funds; all actual fund transfers or transaction broadcasts require external user wallet actions and explicit confirmation.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata