defi-lending
Enables users to check DeFi lending rates, borrowing costs, and protocol comparisons for informed financial decisions.
Install this skill
or
61/100
Security score
The defi-lending skill was audited on May 29, 2026 and we found 15 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 38
Curl to non-GitHub URL
SourceSKILL.md
| 38 | exec command="curl -s -X POST 'https://api.thegraph.com/subgraphs/name/aave/protocol-v3' -H 'Content-Type: application/json' -d '{\"query\":\"{reserves(first:100){name symbol underlyingAsset liquidity |
medium line 45
Curl to non-GitHub URL
SourceSKILL.md
| 45 | exec command="curl -s -X POST 'https://api.thegraph.com/subgraphs/name/aave/protocol-v3' -H 'Content-Type: application/json' -d '{\"query\":\"{userReserves(where:{user:\\\"0xUSER_ADDRESS_LOWERCASE\\\" |
medium line 64
Curl to non-GitHub URL
SourceSKILL.md
| 64 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x87870Bca3F3fD6335C3F4ce8392D69350B4f |
medium line 75
Curl to non-GitHub URL
SourceSKILL.md
| 75 | exec command="curl -s -X POST 'https://blue-api.morpho.org/graphql' -H 'Content-Type: application/json' -d '{\"query\":\"{markets(first:20 orderBy:TotalSupplyUsd orderDirection:Desc){items{uniqueKey l |
medium line 80
Curl to non-GitHub URL
SourceSKILL.md
| 80 | exec command="curl -s -X POST 'https://blue-api.morpho.org/graphql' -H 'Content-Type: application/json' -d '{\"query\":\"{vaults(first:20 orderBy:TotalAssetsUsd orderDirection:Desc){items{name symbol |
medium line 87
Curl to non-GitHub URL
SourceSKILL.md
| 87 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xc3d688B66703497DAA19211EEdff47f25384 |
low line 17
External URL reference
SourceSKILL.md
| 17 | Base: `https://yields.llama.fi` |
low line 21
External URL reference
SourceSKILL.md
| 21 | web_fetch url="https://yields.llama.fi/pools" |
low line 29
External URL reference
SourceSKILL.md
| 29 | web_fetch url="https://yields.llama.fi/chart/POOL_ID" |
low line 38
External URL reference
SourceSKILL.md
| 38 | exec command="curl -s -X POST 'https://api.thegraph.com/subgraphs/name/aave/protocol-v3' -H 'Content-Type: application/json' -d '{\"query\":\"{reserves(first:100){name symbol underlyingAsset liquidity |
low line 45
External URL reference
SourceSKILL.md
| 45 | exec command="curl -s -X POST 'https://api.thegraph.com/subgraphs/name/aave/protocol-v3' -H 'Content-Type: application/json' -d '{\"query\":\"{userReserves(where:{user:\\\"0xUSER_ADDRESS_LOWERCASE\\\" |
low line 64
External URL reference
SourceSKILL.md
| 64 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x87870Bca3F3fD6335C3F4ce8392D69350B4f |
low line 75
External URL reference
SourceSKILL.md
| 75 | exec command="curl -s -X POST 'https://blue-api.morpho.org/graphql' -H 'Content-Type: application/json' -d '{\"query\":\"{markets(first:20 orderBy:TotalSupplyUsd orderDirection:Desc){items{uniqueKey l |
low line 80
External URL reference
SourceSKILL.md
| 80 | exec command="curl -s -X POST 'https://blue-api.morpho.org/graphql' -H 'Content-Type: application/json' -d '{\"query\":\"{vaults(first:20 orderBy:TotalAssetsUsd orderDirection:Desc){items{name symbol |
low line 87
External URL reference
SourceSKILL.md
| 87 | exec command="curl -s -X POST https://eth.llamarpc.com -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xc3d688B66703497DAA19211EEdff47f25384 |
Scanned on May 29, 2026
View Security Dashboard