earn-hunter
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official vendor package
@okx_ai/okx-trade-clifrom the npm registry and manages dependencies for other vendor skills likeokx-cex-earnandokx-cex-auth. - [COMMAND_EXECUTION]: Executes the
okxCLI and a local shell script (scan.sh) to perform market scans and verify authentication. It establishes persistence for these tasks usingcrontabon Linux/macOS andLaunchAgentson macOS. - [DATA_EXFILTRATION]: Sends investment opportunity details to external messaging services (Telegram and Lark). This functionality is limited to user-provided channels and is necessary for the skill's monitoring purpose.
- [SAFE]: Analysis did not reveal any malicious obfuscation, prompt injection, or suspicious network activity beyond the documented notification channels. Credentials are securely managed via environment variables.
Audit Metadata