okx-defi
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides fallback instructions to download and execute installation scripts if the required CLI tool is not found. Evidence: The preflight guide in
_shared/preflight.mddirects the agent to executeinstall.shviashorinstall.ps1viaiexfrom the vendor's GitHub repository. - [EXTERNAL_DOWNLOADS]: The skill references and downloads setup scripts from the official OKX GitHub organization. Evidence:
https://raw.githubusercontent.com/okx/onchainos-skills/main/install.shandhttps://raw.githubusercontent.com/okx/onchainos-skills/main/install.ps1. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external DeFi protocols, which can include attacker-influenced metadata like product names or descriptions. Ingestion points: External protocol data is retrieved through CLI commands like
defi searchanddefi detailas described inreferences/invest-cli-reference.md. Boundary markers: There are no explicit instructions to use delimiters or sanitization warnings when displaying these results to the agent. Capability inventory: The skill can generate and broadcast on-chain transactions via thedeposit,redeem, andclaimcommands, allowing for the execution of financial operations. Sanitization: No specific sanitization or validation logic is defined for the external string fields displayed by the agent.
Audit Metadata