okx-cex-smartmoney

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @okx_ai/okx-trade-cli package from the official npm registry. As this is the official tool from the skill's author (okx), it is considered a legitimate vendor resource.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for the user to configure their own API keys locally using the okx config command. It contains explicit security guidelines for the agent to stop if credentials are missing and strictly forbids asking the user to paste keys into the chat, which is a security best practice for protecting user secrets.
  • [COMMAND_EXECUTION]: The skill executes various smartmoney subcommands via the okx CLI tool. These commands are restricted to read-only data retrieval for analytics purposes (trader leaderboards, positions, and market signals).
  • [DATA_EXPOSURE]: While the skill retrieves and displays trader profiles and position data, this is the intended purpose of the skill and involves public leaderboard information or the user's own account data retrieved via local authenticated CLI calls.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 02:50 PM