okx-sentiment-tracker
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@okx_ai/okx-trade-clipackage. This is a vendor-owned resource associated with the author 'okx'.\n- [COMMAND_EXECUTION]: The agent uses theokxCLI tool to fetch data. The instructions include dynamic timestamp generation using the shelldateutility to form API parameters.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external news platforms and social media feeds, which could contain adversarial content.\n - Ingestion points: News headlines and full article content fetched via
okx news latest,okx news search, andokx news detail.\n - Boundary markers: Absent. There are no instructions to wrap or delimit external news content to prevent the AI from interpreting it as instructions.\n
- Capability inventory: The skill can execute CLI commands, and workflows suggest the agent may also have access to market data and portfolio management capabilities through associated skills.\n
- Sanitization: Absent. The skill does not describe any filtering or validation of the fetched news content.
Audit Metadata