okx-cex-bot
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@okx_ai/okx-trade-clipackage from the NPM registry. This package is an official tool provided by the vendor for managing trading operations. - [COMMAND_EXECUTION]: The agent is instructed to execute various
okxCLI commands to manage Grid and DCA bots, including creation, amendment, and termination of trading strategies. - [INDIRECT_PROMPT_INJECTION]: The skill has a theoretical attack surface for indirect prompt injection because it processes external data from CLI outputs. * Ingestion points: External data enters through the output of commands such as
okx bot grid orders. * Boundary markers: The instructions do not define specific delimiters for separating CLI output from instructions. * Capability inventory: The skill allows for management of trading bots and retrieval of financial data. * Sanitization: No specific sanitization methods for CLI output are specified. - [SAFE]: The skill adheres to security best practices by explicitly instructing the agent to never accept credentials in chat and instead guiding users to the
okx config initcommand for secure local setup.
Audit Metadata