Indigo Loan
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a clear Indigo CDP helper, but it can prepare high-impact DeFi transactions through an external MCP server, so users should review every wallet transaction before signing.
Install this only if you intend to manage Indigo Protocol CDPs. Use a trusted Indigo MCP server, keep wallet signing under your direct control, and carefully review every unsigned transaction in your wallet before approving it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may help prepare Cardano transactions that change DeFi positions; signing an incorrect transaction could cause financial loss or unwanted liquidation/leverage exposure.
The skill documents tools that prepare financial transactions affecting collateral, debt, liquidation, and leverage. This is aligned with the CDP-management purpose, and the unsigned-transaction boundary reduces risk, but the actions are still financially significant.
All write operations return an unsigned transaction (CBOR hex) for client-side signing and submission.
Use the skill only for explicit CDP-management requests, and verify the asset, amount, CDP reference, leverage, and wallet transaction details before signing or submitting.
If the configured MCP server is untrusted or different from what the user expects, it could generate misleading transaction data for the user to sign.
The actual MCP tool implementation is an external prerequisite and is not included in the artifact set. That dependency is expected for this integration, but users must trust the server they connect to.
- `@indigoprotocol/indigo-mcp` server running
Run only a trusted Indigo MCP server, confirm its source and configuration, and compare generated transactions against wallet details before approval.