okx-cex-trade
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'okx' command-line interface to interact with exchange APIs. This is the primary and intended function of the skill for managing crypto assets.
- [EXTERNAL_DOWNLOADS]: The skill installs the '@okx_ai/okx-trade-cli' package from the npm registry. This is a scoped package corresponding to the verified vendor 'okx'.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied parameters to execute financial transactions. To mitigate the risk of accidental or malicious transaction execution, the instructions mandate explicit user confirmation of instrument IDs, sizes, and order modes before any 'WRITE' operations (placing or amending orders) are performed.
- [SAFE]: No malicious patterns such as obfuscation, persistence, or unauthorized data exfiltration were found. The skill adheres to security best practices by instructing the agent never to accept credentials in chat and instead directing users to use the CLI's native 'okx config init' command for setup.
Audit Metadata