okx-agent-payments-protocol

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages payment workflows by executing various subcommands of the onchainos CLI to quote, sign, and settle payments across multiple blockchain networks.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute a version-locked installer from the @okxweb3 organization during its preflight phase to ensure the environment is correctly configured.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external HTTP 402 challenges to extract payment parameters, representing a potential indirect prompt injection surface.
  • Ingestion points: Payment metadata is ingested from PAYMENT-REQUIRED and WWW-Authenticate headers, as well as response bodies, as detailed in SKILL.md and references/session.md.
  • Boundary markers: The skill relies on structured protocol headers and explicit internal routing logic to isolate payment challenges from general conversation context.
  • Capability inventory: The skill possesses the capability to execute shell commands (via the onchainos CLI) and perform network operations (replaying requests) throughout its reference scripts.
  • Sanitization: All complex parsing and cryptographic signing of external payloads are handled by the specialized onchainos CLI, which provides a layer of validation between the agent and the untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 10:04 PM