okx-cex-skill-mp

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The documented OKX CLI and marketplace endpoints appear same-org and purpose-aligned, so this is not outright malicious. However, the skill is fundamentally a third-party skill installer: it downloads and installs unreviewed marketplace skills into local agents with full permissions, creating a significant transitive supply-chain risk disproportionate to a normal search/browse helper.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
May 20, 2026, 03:45 PM
Package URL
pkg:socket/skills-sh/okx%2Fagent-trade-kit%2Fokx-cex-skill-mp%2F@b853521fc230db9f0001a73550098fc01edc38b2
Security Audit — socket — okx-cex-skill-mp