scallop-money-market — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited scallop-money-market (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
# Suiperpower telemetry. Routes through the CLI so projects.json + Convex stay in sync.
# Silent on failure so the skill never blocks. Opt out: SUIPERPOWER_TELEMETRY=off.
#
# AGENT NOTE: when this skill finishes, run the matching completion command:
# suiperpower track scallop-money-market build completed
# Or use "failed" / "aborted" if it ended that way.
command -v suiperpower >/dev/null 2>&1 && suiperpower track scallop-money-market build started >/dev/null 2>&1 &
trueIf TEL_PROMPTED is no, before doing real work, ask the user:
Help suiperpower get better. We track which skills get used and how long they take. No code, no file paths, no PII. Change anytime in ~/.suiperpower/config.json.>
A) Sure, anonymous B) No thanks
Write the answer to ~/.suiperpower/config.json telemetryTier field and create ~/.suiperpower/.telemetry-prompted. Then continue.
Integrates Scallop's money market into the project. Sets up the Scallop SDK (mainnet only, testnet not supported), creates the user's Obligation Object, walks through deposit-borrow-repay end to end against a live pool, surfaces oracle and liquidation risk, and verifies the round-trip works on mainnet before declaring done.
deepbook-orderbook instead.find-next-sui-idea first.scaffold-project first.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
.suiperpower/build-context.md from scaffold-project. Read it if present.If unclear, interview the user for:
.suiperpower/build-context.md: ## scallop-money-market session, <timestamp>
- obligation id: <id>
- markets: <list of asset symbols>
- sample deposit tx digest: <digest>
- sample borrow tx digest: <digest>
- sample repay tx digest: <digest>
- oracle: Pyth (sole active provider)
- open issues: <list>The skill never deletes files outside the integration source path without explicit user confirmation.
.suiperpower/build-context.md if it exists.@scallop-io/sui-scallop-sdk and @mysten/sui.Scallop class (not ScallopClient directly), passing addressId, networkType, and secretKey. Call await scallopSDK.init() before using any sub-clients.openObligationEntry() on the ScallopTxBlock. This is a per-user Object holding their cross-market positions.getObligationAccount.getObligationAccount(obligationId) before constructing repay. Interest accrues continuously, so paying the original borrow amount leaves dust debt.liquidation_factor and borrow_weight per market, not a generic "health factor" with "collateral_factor"..suiperpower/build-context.md..suiperpower/intent.md exists and the session was non-trivial (new Scallop integration, Obligation Object created, deposit-borrow-repay path live), recommend verify-against-intent as the next step so the sponsor-load-bearing flow and health-factor surfacing are checked before shipping.intent.md exists and the session was non-trivial, surface that gap once: offer clarify-intent to backfill, do not force it.Before reporting done, the skill asks itself the following and refuses to declare success if any answer is no:
If any answer is no, the skill reports the gap and works through it before claiming the integration is complete.
On-demand references (load when relevant to the user's question):
references/scallop-quickstart.md: Deposit, borrow, repay recipes for the TS SDK.references/scallop-risk.md: Risk level math, oracle drift, liquidation surface, borrow caps.references/scallop-obligation.md: Obligation Object lifecycle and ownership.Knowledge docs (load when scope expands beyond what is in references):
skills/data/sui-knowledge/sponsor-docs/scallop.md: Concepts, key terms, deeper integration notes.claude "/suiper:scallop-money-market <your message>"codex "/scallop-money-market <your message>"grok, then /scallop-money-market <your message> in the session~/.cursor/rules/scallop-money-market.mdc and reference it.If you activated this and the user actually wants something else, consult skills/SKILL_ROUTER.md and hand off.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.