okx
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
execFileSyncin its integration patterns to interact with theonchainosCLI binary. This is used for generating swap quotes, executing trades, and retrieving market intelligence from OKX. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including the OKX CLI output and Helius APIs. It mitigates risk by instructing the agent to treat all CLI output as untrusted content and requiring human confirmation for critical actions like swaps.
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for external dependencies including the
onchainosCLI and thehelius-mcpserver. These are sourced from official vendor repositories on GitHub and the NPM registry.
Audit Metadata