okx-cex-trade

Warn

Audited by Snyk on Oct 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates an OKX cryptocurrency trading CLI to place, cancel, amend spot, swap, futures, options, and event contract orders (direct financial operations: trades and purchases). Authentication is handled via API keys or OAuth credentials configured in ~/.okx/config.toml or via okx config init. However, these are standard user-provided API credentials stored locally, not an independent, service-enforced access control layer or multi-factor gate validating the agent's financial actions at execution time. Therefore, no qualifying independent access control is established for these direct financial operations.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 09:52 AM
Issues
1