okx-agent-payments-protocol

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on the onchainos CLI tool to perform all blockchain operations, including wallet status checks, balance inquiries, and transaction signing. These commands are well-scoped to the skill's purpose of facilitating payments.
  • [EXTERNAL_DOWNLOADS]: The _shared/preflight.md file contains logic to download and execute an install.sh script if the required CLI tool is missing. This is a standard dependency management pattern for the OKX agentic wallet ecosystem and is used to ensure the execution environment is correctly configured.
  • [SAFE]: The protocol includes several security-centric designs:
  • User Confirmation Gates: It explicitly forbids skipping user confirmation (Step A4, Step A3.5) before signing payments.
  • TEE Integration: It prioritizes Trusted Execution Environment (TEE) signing, ensuring private keys are protected during the signing process.
  • Secret Management: It provides instructions for secure local key management (e.g., chmod 600 for environment files) when using the local-key fallback path.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 04:05 PM