okx-cex-trade

BENIGN for purpose alignment and data flow: the skill’s credential use, order-management commands, and OKX endpoints match its stated trading purpose, and the installer appears same-org/official via npm. Security risk is still moderate because the skill authorizes real-world financial trades and depends on an external CLI with account credentials, but there is no clear sign of credential harvesting, hidden execution, or off-platform exfiltration.