okx-agentic-wallet

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The preflight checks execute npx -y @okxweb3/onchainos-installer install from npm during runtime setup, which constitutes an unverifiable runtime external dependency from an uncontrolled third-party package registry.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly details capabilities for cryptocurrency wallet operations, token swaps, cross-chain bridges, limit orders, on-chain transaction execution, broadcasting, and contract calls via the onchainos CLI, which falls under Crypto/Blockchain financial execution.