okx-cex-bot
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructions direct the agent to run
okx config show --jsonwhich reads the~/.okx/config.tomlfile. This file contains API keys and other sensitive authentication data for the OKX exchange. The agent uses this information to verify the user's trading profiles and environment. - [EXTERNAL_DOWNLOADS]: The skill relies on the installation of the
@okx_ai/okx-trade-clipackage from the npm registry. This is an official CLI tool provided by the vendor (OKX) for managing trading operations. - [COMMAND_EXECUTION]: The skill executes multiple shell commands through the
okxCLI to perform operations such asokx bot grid create,okx bot grid stop, andokx bot dca amend. These commands directly manage financial assets and bot configurations. - [PROMPT_INJECTION]: An indirect prompt injection surface exists as the skill processes data from external tool outputs.
- Ingestion points: The agent parses the JSON output of commands such as
okx config show,okx auth status, andokx bot grid ordersto make logic decisions. - Boundary markers: There are no specified delimiters or instructions to ignore potential injection patterns within the tool's output.
- Capability inventory: The skill possesses the capability to execute financial transactions and modify trading strategies.
- Sanitization: The instructions do not include steps for sanitizing or validating the data returned by the CLI before it is used to formulate subsequent commands.
Audit Metadata