compound-v3-plugin

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities fit its stated DeFi purpose, and the main install sources are verifiably same-org OKX resources, so this is not fundamentally incompatible or overtly malicious. However, it performs autonomous-capable financial operations, installs additional skills, and executes downloaded tooling/scripts; the plugin binary and some helper downloads are not fully verified in the snippet, making overall risk medium-high despite reasonable purpose alignment.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
May 12, 2026, 11:01 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fcompound-v3-plugin%2F@63b49cdeab6e2459ec5797bcc9ba07cae3abd788