okx-agent-payments-protocol
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
onchainosCLI tool to perform all blockchain operations, including wallet status checks, balance inquiries, and transaction signing. These commands are well-scoped to the skill's purpose of facilitating payments. - [EXTERNAL_DOWNLOADS]: The
_shared/preflight.mdfile contains logic to download and execute aninstall.shscript if the required CLI tool is missing. This is a standard dependency management pattern for the OKX agentic wallet ecosystem and is used to ensure the execution environment is correctly configured. - [SAFE]: The protocol includes several security-centric designs:
- User Confirmation Gates: It explicitly forbids skipping user confirmation (Step A4, Step A3.5) before signing payments.
- TEE Integration: It prioritizes Trusted Execution Environment (TEE) signing, ensuring private keys are protected during the signing process.
- Secret Management: It provides instructions for secure local key management (e.g.,
chmod 600for environment files) when using the local-key fallback path.
Audit Metadata