compound-v2-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its core binary and the
onchainosCLI from the author's official GitHub repositories (okx). These downloads are performed using secure protocols and are validated against SHA256 checksums provided by the vendor before any execution occurs. - [COMMAND_EXECUTION]: Local shell commands are used to manage the lifecycle of the plugin and to interact with the
onchainoswallet CLI for address resolution and transaction submission. All commands are executed in a controlled manner. - [SAFE]: The skill includes a detailed 'Live Trading Confirmation Protocol' which explicitly instructs the AI agent to refuse any write operations unless the user has provided a typed confirmation in the current session and reviewed a preview of the transaction.
- [SAFE]: Blockchain data is retrieved via standard JSON-RPC requests to a well-known public node provider. The implementation includes robust error handling to prevent the agent from acting on incomplete or corrupted data (EVM-012 compliance).
Audit Metadata