compound-v3-plugin
Warn
Audited by Socket on May 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities fit its stated DeFi purpose, and the main install sources are verifiably same-org OKX resources, so this is not fundamentally incompatible or overtly malicious. However, it performs autonomous-capable financial operations, installs additional skills, and executes downloaded tooling/scripts; the plugin binary and some helper downloads are not fully verified in the snippet, making overall risk medium-high despite reasonable purpose alignment.
Confidence: 100%Severity: 60%
Audit Metadata