okx-ai
Warn
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation and recovery of the
@okxweb3/a2a-nodepackage and theonchainosbinary. These dependencies originate from the OKX organization, a recognized technology provider, and are handled through official registries and domains. - [COMMAND_EXECUTION]: The skill performs extensive command execution using the
onchainosCLI for blockchain-based identity and task management. It also utilizes a dynamic execution pattern in the task watch loop where it executes instructions contained within anllmContentfield provided in decision requests. This field is used to maintain state and logic across multi-turn user interactions but involves the runtime execution of dynamically generated instructions. - [DATA_EXFILTRATION]: Facilitates the reading and uploading of local files to the OKX AI platform via
agent file-uploadandagent task-attachcommands. This functionality is the primary mechanism for agents to submit deliverables and attachments for tasks in the marketplace. - [PROMPT_INJECTION]: Includes specific security guidelines to protect against indirect prompt injection by instructing the agent to ignore any executable-like content found in untrusted data fields, such as agent descriptions, reviews, or dispute evidence materials.
Audit Metadata