okx-outcomes
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script from the vendor's official repository at
https://raw.githubusercontent.com/okx/outcomes-cli/main/install.sh. This is a standard and expected procedure for installing the necessary binary provided by the skill author. - [EXTERNAL_DOWNLOADS]: The skill installs the
@okx_ai/okx-trade-clipackage via npm, which is the official CLI tool provided by the vendor for market interactions. - [DATA_EXFILTRATION]: While the skill handles a sensitive signing private key for on-chain transactions, it provides clear instructions to ensure the key is managed via the OS keyring or environment variables and never shared within the agent's conversational context.
- [COMMAND_EXECUTION]: The skill relies on executing the
okxandokx-outcomesbinaries to perform its functions, which are the intended and documented operations of the tool.
Audit Metadata