okx-agent-payments-protocol
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages payment workflows by executing various subcommands of the
onchainosCLI to quote, sign, and settle payments across multiple blockchain networks. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute a version-locked installer from the@okxweb3organization during its preflight phase to ensure the environment is correctly configured. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external HTTP 402 challenges to extract payment parameters, representing a potential indirect prompt injection surface.
- Ingestion points: Payment metadata is ingested from
PAYMENT-REQUIREDandWWW-Authenticateheaders, as well as response bodies, as detailed inSKILL.mdandreferences/session.md. - Boundary markers: The skill relies on structured protocol headers and explicit internal routing logic to isolate payment challenges from general conversation context.
- Capability inventory: The skill possesses the capability to execute shell commands (via the
onchainosCLI) and perform network operations (replaying requests) throughout its reference scripts. - Sanitization: All complex parsing and cryptographic signing of external payloads are handled by the specialized
onchainosCLI, which provides a layer of validation between the agent and the untrusted data.
Audit Metadata