earn-hunter

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PERSISTENCE]: The skill establishes recurring tasks using OS-level scheduling mechanisms (Crontab and macOS LaunchAgents) to enable automated monitoring. This is the disclosed and primary mechanism for providing real-time earn opportunity alerts.
  • [COMMAND_EXECUTION]: Executes the okx CLI, jq, and curl through a local shell script (scan.sh) to perform data fetching, processing, and notification delivery.
  • [DATA_EXFILTRATION]: Transmits scan results to external endpoints including Telegram Bot API and Lark Webhooks. This behavior is user-initiated and configured during the activation process to facilitate push notifications.
  • [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting untrusted data from external OKX APIs.
  • Ingestion points: ~/.okx/earn-hunter/scan.sh fetches JSON data from OKX Earn APIs via the okx CLI.
  • Boundary markers: Notification templates in the templates/ directory do not utilize explicit boundary markers or delimiters for external data.
  • Capability inventory: The skill can execute subprocesses, manage persistence via crontab, and perform network requests via curl.
  • Sanitization: Data is parsed as structured JSON via jq, but no specific sanitization is applied to string values before they are relayed as notifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 09:53 AM