okx-cex-smartmoney
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@okx_ai/okx-trade-clipackage from the official npm registry. As this is the official tool from the skill's author (okx), it is considered a legitimate vendor resource. - [CREDENTIALS_UNSAFE]: The skill provides instructions for the user to configure their own API keys locally using the
okx configcommand. It contains explicit security guidelines for the agent to stop if credentials are missing and strictly forbids asking the user to paste keys into the chat, which is a security best practice for protecting user secrets. - [COMMAND_EXECUTION]: The skill executes various
smartmoneysubcommands via theokxCLI tool. These commands are restricted to read-only data retrieval for analytics purposes (trader leaderboards, positions, and market signals). - [DATA_EXPOSURE]: While the skill retrieves and displays trader profiles and position data, this is the intended purpose of the skill and involves public leaderboard information or the user's own account data retrieved via local authenticated CLI calls.
Audit Metadata