okx-cex-trade

BENIGN for stated purpose but high-impact. The skill is internally consistent with official OKX trading workflows, uses an official same-org npm CLI, and routes data to OKX rather than a suspicious intermediary. The main risk is not hidden behavior but that it enables autonomous live financial trading and leverage changes, so overall security risk is medium-high despite low evidence of malware.