okx-cex-auth
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation of the
@okx_ai/okx-trade-clipackage via npm and triggers the download of theokx-authbinary using theokx auth installcommand. These are standard components provided by the vendor for the CLI's operation.- [COMMAND_EXECUTION]: The skill invokes several shell commands to manage authentication states, includingokx config show,okx auth status, andokx auth login --manual. These commands are used to interact with the vendor's CLI tool.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as CLI tool outputs and user site selections. It addresses potential injection risks through a mandatory pre-flight validation process (Step 0) and by mapping user inputs to a strict list of allowed site identifiers, ensuring commands are executed with validated parameters.
Audit Metadata