okx-defi
Warn
Audited by Snyk on Sep 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill fetches and executes remote installation scripts from GitHub via curl/irm at runtime during preflight checks if the CLI is not found.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill contains explicit capabilities and instructions for managing DeFi products, including deposits, staking, liquidity provision, withdrawals, rewards claiming, and lending positions via the
onchainos defiCLI command group and associated routing files, meeting the criteria for Direct Financial Execution (Crypto/Blockchain wallets, swaps, staking, and DeFi operations).
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata