compound

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in purpose alignment and data flow: it is a legitimate Compound V3 interaction guide using official-style npm and direct on-chain calls. However, it is HIGH security risk as an AI-agent skill because it enables autonomous financial transactions and uses a private key for signing, so misuse could cause irreversible asset loss or public governance actions.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Aug 4, 2026, 12:32 AM
Package URL
pkg:socket/skills-sh/JustaName-id%2Fcryptoskills%2Fcompound%2F@bc0e09a2ba31f0e4e43ce8f53921cfab7de490fcfb03ef4efaf4d726d314b805
Security Audit — socket — compound