Indigo Redemption

• Analyzed: May 14, 2026, 6:04 AM
• Findings: 1
• Version: 1.0.0
• Hash: 2bb6dc493bcf926ee6e8c2ce5d263ec5b2ea46378ca302b697fbc25ae3b126cf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The indigo-redemption skill bundle provides a legitimate interface for managing Redemption Order Book (ROB) positions on the Indigo Protocol. It utilizes an MCP server (@indigoprotocol/indigo-mcp) and follows security best practices by returning unsigned CBOR transactions for client-side signing rather than executing transactions directly. The documentation (SKILL.md, rob-manage.md) is consistent with its stated purpose and contains no evidence of malicious intent, data exfiltration, or harmful prompt injection.