okx-cex-market
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the @okx_ai/okx-trade-cli package from the public npm registry. This is a vendor-owned package designed to provide CLI access to OKX market data services.
- [COMMAND_EXECUTION]: The skill utilizes the okx binary to perform shell-based data retrieval. The instructions specify that no manual user confirmation is required for these read-only market commands, which is a common pattern for streamlining data-gathering tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the OKX API, including instrument names, price data, and technical indicator outputs, which are then processed by the agent. 1. Ingestion points: The agent receives output from various okx market CLI subcommands. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potential instructions embedded within the retrieved data. 3. Capability inventory: The skill's active capabilities are restricted to the execution of pre-defined okx CLI commands for market data; it does not have the ability to write to the file system or perform arbitrary network operations. 4. Sanitization: No specific data sanitization or validation routines for the external API responses are mentioned in the skill definition.
Audit Metadata