okx-cex-smartmoney
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill allows users to query trader leaderboards, positions, and consensus signals from OKX. All operations are read-only analytics.
- [EXTERNAL_DOWNLOADS]: The skill installs the official @okx_ai/okx-trade-cli package from npm. This is a verified vendor resource belonging to the author of the skill.
- [DATA_EXPOSURE]: The skill provides clear instructions on managing API credentials locally using ~/.okx/config.toml and explicitly warns the agent and the user never to share sensitive API keys or passphrases within the chat interface.
- [COMMAND_EXECUTION]: Shell commands are used to interact with the OKX CLI. These commands are restricted to the functionality provided by the vendor tool for market and trader analysis.
- [SAFE]: The skill presents an indirect prompt injection surface as it ingests trader and signal data from OKX APIs (SKILL.md). However, this risk is categorized as safe because the ingested data is structured financial metrics and the skill lacks any capabilities (like file writes or remote code execution) that could be exploited by malicious data content.
Audit Metadata