Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, read-only DeFi liquidity-position monitor that gives recommendations but explicitly blocks transaction execution and wallet authority.
Install this only if you want an agent to analyze public DeFi LP positions and make non-executing recommendations. Treat optional provider setup and installer commands carefully: choose providers explicitly, verify versions, keep API keys in a secret store, and require a separate explicit workflow before any transaction is prepared or signed.
Referenced artifact was not completely inspected
Use `node scripts/position.mjs --help` for range state and balance-sheet arithmetic. It does not fetch chain data and does not choose an action.
Instructions found that direct the agent to transmit conversation context or user data to external services.
If the user chooses Revert, register that URL in the harness's remote MCP settings using the harness's own setup instructions. Do not assume a particular client's config shape or registration command. Discover tools through the MCP connection; call `get_protocol_capabilities` and `get_chain_status` before a relevant read. Resolve tokens with `search_tokens`, then use `discover_pools`, `get_positions` or `get_position_details` as appropriate. Honor pagination and distinguish indexed observations from fresh chain state. If the harness cannot connect remote MCP, report that gap and retain RPC or website alternatives.
For an unsigned plan, use only a currently advertised `prepare_*` capability matching the exact network, protocol, position custody and action. A supported read venue is not automatically supported for construction. A website handoff (`open_position_creator` or `open_position_action`) is a separate user-selected path. Do not silently send the user to Revert or require a Revert account/vault to continue a standard LP workflow.
Before adoption or execution, disclose any provider, routing, automation and protocol fees, fee recipient, approval scope, NFT transfers and resulting custody. If fees or custody are unresolved, keep the plan blocked; never infer that public/no-key access means fee-free transactions. Do not inject referral, affiliate or builder fees. Collateralization and borrowing are separate financial actions and must not appear as incidental setup or ordinary LP maintenance.
The skill enables implicit invocation without any visible activation constraints, gating logic, or narrow trigger conditions. That creates a risk the agent will invoke this skill automatically in loosely related contexts, causing unintended access to live position evaluation workflows and potentially producing financial recommendations when the user did not explicitly request them.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
uvx/uv tool run commands without ==version create a rug-pull risk.
uvx/uv tool run commands without ==version create a rug-pull risk.
No suspicious patterns detected.