earn-hunter
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill establishes recurring tasks using OS-level scheduling mechanisms (Crontab and macOS LaunchAgents) to enable automated monitoring. This is the disclosed and primary mechanism for providing real-time earn opportunity alerts.
- [COMMAND_EXECUTION]: Executes the
okxCLI,jq, andcurlthrough a local shell script (scan.sh) to perform data fetching, processing, and notification delivery. - [DATA_EXFILTRATION]: Transmits scan results to external endpoints including Telegram Bot API and Lark Webhooks. This behavior is user-initiated and configured during the activation process to facilitate push notifications.
- [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting untrusted data from external OKX APIs.
- Ingestion points:
~/.okx/earn-hunter/scan.shfetches JSON data from OKX Earn APIs via theokxCLI. - Boundary markers: Notification templates in the
templates/directory do not utilize explicit boundary markers or delimiters for external data. - Capability inventory: The skill can execute subprocesses, manage persistence via crontab, and perform network requests via
curl. - Sanitization: Data is parsed as structured JSON via
jq, but no specific sanitization is applied to string values before they are relayed as notifications.
Audit Metadata