skills/okx/agent-skills/okx-cex-bot/Gen Agent Trust Hub

okx-cex-bot

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @okx_ai/okx-trade-cli package from the NPM registry. This package is an official tool provided by the vendor for managing trading operations.
  • [COMMAND_EXECUTION]: The agent is instructed to execute various okx CLI commands to manage Grid and DCA bots, including creation, amendment, and termination of trading strategies.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a theoretical attack surface for indirect prompt injection because it processes external data from CLI outputs. * Ingestion points: External data enters through the output of commands such as okx bot grid orders. * Boundary markers: The instructions do not define specific delimiters for separating CLI output from instructions. * Capability inventory: The skill allows for management of trading bots and retrieval of financial data. * Sanitization: No specific sanitization methods for CLI output are specified.
  • [SAFE]: The skill adheres to security best practices by explicitly instructing the agent to never accept credentials in chat and instead guiding users to the okx config init command for secure local setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 02:12 PM