aave

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The lending functionality matches the stated Aave purpose, but the skill authorizes high-impact financial actions, depends on an unverified external wallet service, and instructs the agent to load another skill and request a wildcard wallet policy. This is not confirmed malware, but it is a high-consequence crypto skill with overbroad authorization guidance.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Mar 14, 2026, 10:08 PM
Package URL
pkg:socket/skills-sh/Starchild-ai-agent%2Fofficial-skills%2Faave%2F@853c599741b5ad77ecbe4945363c119bebe8d328