Skills
skills/migokg/plugin-store/sky-lending/Socket

sky-lending

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the DeFi purpose is plausible, but the actual footprint is broader than needed. The main concerns are an unverifiable downloaded binary, global transitive skill installation, and device-fingerprinting telemetry sent to external endpoints; these are disproportionate for a dry-run lending skill even though the core MakerDAO functionality itself is coherent.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Apr 9, 2026, 05:46 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fsky-lending%2F@ea7b54b7827317afe5c8964075b168242ba77fce