okx-defi

Warn

Audited by Snyk on Sep 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The skill fetches and executes remote installation scripts from GitHub via curl/irm at runtime during preflight checks if the CLI is not found.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill contains explicit capabilities and instructions for managing DeFi products, including deposits, staking, liquidity provision, withdrawals, rewards claiming, and lending positions via the onchainos defi CLI command group and associated routing files, meeting the criteria for Direct Financial Execution (Crypto/Blockchain wallets, swaps, staking, and DeFi operations).

Issues (2)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 3, 2026, 02:17 AM
Issues
2
Security Audit — snyk — okx-defi