okx-cex-trade
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@okx_ai/okx-trade-clipackage from the npm registry. This is a vendor-owned package used to provide the underlying trading functionality and is consistent with the author's identity. - [COMMAND_EXECUTION]: The skill executes various shell commands through the
okxCLI to place, cancel, and monitor trades. Safety is maintained through strict instructional guardrails that require the agent to confirm all order parameters and trading modes (Live vs. Demo) with the user before any write operations are performed. - [CREDENTIALS_UNSAFE]: The skill manages API credentials stored locally in
~/.okx/config.toml. It adheres to security best practices by explicitly instructing the agent never to request or accept credentials directly in the chat, instead guiding the user to a secure local initialization flow.
Audit Metadata