okx-dapp-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill retrieves a catalog of available plugins from the GitHub API and uses a Python interpreter to parse the resulting JSON data. This mechanism allows the skill to dynamically identify and match user requests to available plugin identifiers.
- [COMMAND_EXECUTION]: Automates the installation of secondary plugins using the
npx skills addcommand with the--yesflag, which bypasses manual confirmation prompts. It also executes shell commands to enumerate currently installed plugins and verify their presence. - [EXTERNAL_DOWNLOADS]: Fetches plugin manifests and metadata from GitHub repositories to maintain an up-to-date routing table and facilitate on-demand installations.
- [PROMPT_INJECTION]: Contains specific instructions to the agent to suppress internal decision-making data, such as confidence scores and logic tiers, ensuring that internal routing mechanisms are not disclosed in the user-facing output.
Audit Metadata