fix(compound-v3): bump source_commit to fix global flags + SKILL.md improvements

[skylavis-sky]

Summary

• Points source_commit to f539fe7b8e3e0b56a1a1e9abd1ae43d4b4aea949 in skylavis-sky/onchainos-plugins
• Adds global = true to --chain, --market, --dry-run — fixes compound-v3 get-markets --chain 8453 ordering error
• Adds Pre-flight Checks section to SKILL.md
• Adds field filtering guidance to get-markets and get-position (prevent raw contract output in agent context)

Source PRs

• fix(compound-v3): make --chain, --market, --dry-run global flags skylavis-sky/onchainos-plugins#11 (merged) — global flag fix
• fix: move SKILL.md to plugin root for skill discoverability skylavis-sky/onchainos-plugins#17 (merged) — SKILL.md moved to plugin root
• fix(compound-v3): add pre-flight checks and field filtering guidance to SKILL.md skylavis-sky/onchainos-plugins#18 (merged) — pre-flight checks + field filtering guidance

🤖 Generated with Claude Code

[github-actions]

Phase 4: Summary + Pre-flight for compound-v3

Review below. AI Code Review is in a separate check.

---

SUMMARY.md

compound-v3

A comprehensive lending plugin for Compound V3 (Comet) that enables supplying collateral, borrowing/repaying base assets, and claiming COMP rewards across multiple chains.

Highlights

• Multi-chain support (Ethereum, Base, Arbitrum, Polygon)
• Complete lending workflow: supply collateral, borrow base assets, repay debt, withdraw collateral
• COMP rewards claiming functionality
• Built-in safety checks and dry-run preview mode
• Automatic debt repayment when supplying base assets
• Real-time market data and position tracking
• Overflow protection for repay operations
• Pre-transaction validation and user confirmation flows

SKILL_SUMMARY.md

compound-v3 -- Skill Summary

Overview

This plugin provides complete access to Compound V3 (Comet) lending markets across Ethereum, Base, Arbitrum, and Polygon networks. It enables users to supply collateral, borrow base assets (like USDC), repay debt, withdraw collateral, and claim COMP rewards. The plugin includes safety mechanisms like pre-transaction validation, dry-run previews, and automatic debt repayment when supplying base assets.

Usage

Install the plugin binary and ensure your wallet is connected via onchainos wallet login. Use dry-run mode to preview transactions before execution, and the plugin will guide you through confirmation steps for all write operations.

Commands

• get-markets - View market statistics (utilization, APR, total supply/borrow)
• get-position - View account position (supply/borrow balances, collateralization status)
• supply - Supply collateral or base assets (auto-repays debt if supplying base asset)
• borrow - Borrow base assets against collateral
• repay - Repay borrowed base assets (partial or full repayment)
• withdraw - Withdraw supplied collateral (requires zero debt)
• claim-rewards - Claim COMP rewards from CometRewards contract

Triggers

Activate this skill when users mention Compound V3, Comet lending, supplying/borrowing assets, claiming COMP rewards, or managing lending positions. Also trigger on phrases like "compound supply", "compound borrow", "compound repay", "compound withdraw", or "compound rewards".

Auto-injected Pre-flight

## Pre-flight Dependencies (auto-injected by Plugin Store CI)

> Run once per session before first use. These checks ensure required tools are installed.

### Install onchainos CLI + Skills (auto-injected)

```bash
# 1. Install onchainos CLI
onchainos --version 2>/dev/null || curl -fsSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | sh

# 2. Install onchainos skills (enables AI agent to use onchainos commands)
npx skills add okx/onchainos-skills --yes --global

# 3. Install plugin-store skills (enables plugin discovery and management)
npx skills add MigOKG/plugin-store --skill plugin-store --yes --global

Install compound-v3 binary (auto-injected)

if ! command -v compound-v3 >/dev/null 2>&1; then
  OS=$(uname -s | tr A-Z a-z)
  ARCH=$(uname -m)
  case "${OS}_${ARCH}" in
    darwin_arm64)  TARGET="aarch64-apple-darwin" ;;
    darwin_x86_64) TARGET="x86_64-apple-darwin" ;;
    linux_x86_64)  TARGET="x86_64-unknown-linux-gnu" ;;
    linux_aarch64) TARGET="aarch64-unknown-linux-gnu" ;;
  esac
  curl -fsSL "https://github.com/MigOKG/plugin-store/releases/download/plugins/compound-v3@0.1.0/compound-v3-${TARGET}" -o ~/.local/bin/compound-v3
  chmod +x ~/.local/bin/compound-v3
fi

Report install (auto-injected, runs once)

REPORT_FLAG="$HOME/.plugin-store/reported/compound-v3"
if [ ! -f "$REPORT_FLAG" ]; then
  mkdir -p "$HOME/.plugin-store/reported"
  # Device fingerprint → SHA256 → 32-char device ID
  DEV_RAW="$(hostname):$(uname -s):$(uname -m):$HOME"
  DEV_ID=$(echo -n "$DEV_RAW" | shasum -a 256 | head -c 32)
  # HMAC signature (obfuscated key, same as CLI binary)
  _K=$(echo 'OE9nNWFRUFdfSVJkektrMExOV2RNeTIzV2JibXo3ZWNTbExJUDFIWnVoZw==' | base64 -d 2>/dev/null || echo 'OE9nNWFRUFdfSVJkektrMExOV2RNeTIzV2JibXo3ZWNTbExJUDFIWnVoZw==' | openssl base64 -d)
  HMAC_SIG=$(echo -n "${_K}${DEV_ID}" | shasum -a 256 | head -c 8)
  DIV_ID="${DEV_ID}${HMAC_SIG}"
  unset _K
  # Report to Vercel stats
  curl -s -X POST "https://plugin-store-dun.vercel.app/install" \
    -H "Content-Type: application/json" \
    -d '{"name":"compound-v3","version":"0.1.0"}' >/dev/null 2>&1 || true
  # Report to OKX API (with HMAC-signed device token)
  curl -s -X POST "https://www.okx.com/priapi/v1/wallet/plugins/download/report" \
    -H "Content-Type: application/json" \
    -d '{"pluginName":"compound-v3","divId":"'"$DIV_ID"'"}' >/dev/null 2>&1 || true
  touch "$REPORT_FLAG"
fi

---

</details>

---
*Generated by Plugin Store CI after maintainer approval.*

[github-actions]

🔨 Phase 2: Build Verification — ❌ FAILED

Plugin: compound-v3 | Language: rust
Source: skylavis-sky/onchainos-plugins@f539fe7b

Compiled from developer source code by our CI. Users install our build artifacts.

Build failed. Check the workflow logs.

---

Source integrity: commit SHA f539fe7b8e3e0b56a1a1e9abd1ae43d4b4aea949 is the content fingerprint.

[github-actions]

📋 Phase 3: AI Code Review Report — Score: N/A/100

Plugin: compound-v3 | Recommendation: 👤 Manual review required

🔗 Reviewed against latest onchainos source code (live from main branch) | Model: unknown via Anthropic API | Cost: unknown

This is an advisory report. It does NOT block merging. Final decision is made by human reviewers.

---

AI review did not produce output.

Generated by Claude AI via Anthropic API — review the full report before approving.

[github-actions]

✅ Phase 1: Structure Validation — PASSED

Linting skills/compound-v3...

  ⚠️  [W100] suspicious pattern: 'base64' — contains base64 reference — may embed hidden content
  ⚠️  [W100] suspicious pattern: 'curl ' — contains curl command — external network request

✓ Plugin 'compound-v3' passed with 2 warning(s)

→ Proceeding to Phase 2: Build Verification