okx-cex-earn
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@okx_ai/okx-trade-clipackage from npm. This is an official resource provided by the vendor 'okx' and is required for the skill's functionality. - [COMMAND_EXECUTION]: The skill invokes the
okxcommand-line utility to perform financial operations such as subscribing to Earn products, redeeming funds, and checking account balances. These commands are restricted to the intended scope of the skill. - [CREDENTIALS_UNSAFE]: The skill instructions allow the agent to read authentication state via
okx config show --jsonandokx auth status --json. However, the skill includes explicit safety guidelines, instructing the agent to never accept credentials in chat and to direct users to the vendor's secure configuration tools. - [INDIRECT_PROMPT_INJECTION]: The skill parses JSON output from the OKX CLI for display in Markdown tables. This is an ingestion point for external data; however, because the data originates from the vendor's own verified utility, the risk of malicious payload injection is negligible within this context.
Audit Metadata