defi-lending

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The purpose is broadly consistent with DeFi lending on Cardano, but the skill has meaningful trust gaps: undeclared script/dependency provenance, unverified Surf API claims, and a partner-key auth flow that is not clearly documented in the provided evidence. It is not confirmed malicious, but it is a medium-risk financial-action skill that should be reviewed with the actual script code and endpoint details before use.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Mar 22, 2026, 01:22 AM
Package URL
pkg:socket/skills-sh/Flux-Point-Studios%2Fcardano-defi-skills%2Fdefi-lending%2F@b08987b37b035c14556f6fb4bbee758a4c036667