review-proposal

Decode Compound governance calldata and produce a structured markdown review file.

5|1|Updated Oct 14, 2025
One-click install
npx skills add https://github.com/ChainSecurity/compound-security-tools --skill review-proposal-chainsecurity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-proposal
Source: https://github.com/ChainSecurity/compound-security-tools/tree/main/.claude/skills/review-proposal
Command: npx skills add https://github.com/ChainSecurity/compound-security-tools --skill review-proposal-chainsecurity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviewers need a structured, repeatable method to assess Compound governance proposals for security and correctness, ensuring consistency and traceability.

Core Features & Use Cases

  • Verification-driven review: Applies a comprehensive checklist to decoded proposal data and current on-chain state.
  • Ground-truth comparison: Encourages cross-checking against forum discussions and authoritative sources.
  • Impact assessment: Produces a risk-rated report with actionable findings and a concise recommendations section.

Quick Start

Provide a proposal ID to generate a detailed governance review.

Frequently Asked Questions about review-proposal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review governance proposals for security and correctness risks?

Review governance proposals by decoding calldata and applying a verification checklist to surface risk and correctness issues. Cross-check parameters against forum discussions and on-chain state to validate approvals and execution feasibility.

What is the process for decoding governance proposal calldata to validate parameters?

Decoding governance proposal calldata involves parsing the transaction data to extract target contracts and function arguments. This decoded data is then verified against authoritative sources to ensure parameters match the intended execution.

How to perform an on-chain risk analysis for a governance proposal?

Perform on-chain risk analysis by cross-checking decoded proposal data against current blockchain state. This validation process confirms approvals and execution feasibility, producing a risk-rated report with severity findings.

Can I generate a structured markdown report for governance proposal verification?

Yes, you can generate a structured markdown review file under reviews/proposal-$ARGUMENTS.md. This report documents the findings, severity levels, and actionable recommendations from the governance verification checklist.

Does the governance review workflow support cross-checking against forum discussions?

Yes, the governance review workflow supports cross-checking against forum discussions. It compares decoded proposal data and on-chain state with these authoritative sources to validate parameters and ensure consistency.

What limitations exist when assessing execution feasibility of on-chain governance proposals?

Assessing execution feasibility relies on accurate calldata decoding and current on-chain state validation. Limitations arise if authoritative sources or forum discussions are incomplete, potentially affecting the correctness of the risk-rated findings.