okx-defi

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an npm package @okxweb3/onchainos-installer during setup, which provides a remote dependency via an unknown/third-party registry path.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations such as DeFi deposits, staking, withdrawals, rewards claiming, and liquidity management across protocols via CLI commands. However, access control relies entirely on local agent instructions (checking wallet login state and address matching via onchainos wallet status), with no independent authentication or authorization mechanism enforced by the service or execution layer for the payment/transaction routes.