compound-v3-plugin
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its core binary, an installer script, and shared infrastructure from the official GitHub repositories of the 'okx' organization. These downloads are performed to install and update the tool and are verified using SHA256 checksums to ensure file integrity before execution.
- [COMMAND_EXECUTION]: The skill executes shell commands to interact with the 'onchainos' CLI for wallet management, balance checks, and transaction signing. This is the intended primary purpose of the skill to facilitate on-chain operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external on-chain sources such as token balances, market rates, and account positions. It explicitly contains a 'Data Trust Boundary' warning instructing the agent to treat this output as untrusted external content and not as system directives, which satisfies security best practice for data ingestion.
Audit Metadata