okx-cex-skill-mp
Warn
Audited by Socket on May 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The documented OKX CLI and marketplace endpoints appear same-org and purpose-aligned, so this is not outright malicious. However, the skill is fundamentally a third-party skill installer: it downloads and installs unreviewed marketplace skills into local agents with full permissions, creating a significant transitive supply-chain risk disproportionate to a normal search/browse helper.
Confidence: 88%Severity: 76%
Audit Metadata