compound
Warn
Audited by Socket on Aug 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN in purpose alignment and data flow: it is a legitimate Compound V3 interaction guide using official-style npm and direct on-chain calls. However, it is HIGH security risk as an AI-agent skill because it enables autonomous financial transactions and uses a private key for signing, so misuse could cause irreversible asset loss or public governance actions.
Confidence: 90%Severity: 76%
Audit Metadata