okx-security
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and binary checksums from the official OKX GitHub repository. This is used for initial setup and automated updates of the security CLI tool.
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installer script (
install.shorinstall.ps1) from a remote source. Security is ensured by a mandatory verification step where the script's SHA256 hash is checked against a trusted checksum file before execution. - [COMMAND_EXECUTION]: The skill executes a local binary (
onchainos) to perform its scanning functions. To ensure integrity, the agent is instructed to verify the binary's SHA256 signature against a remote manifest once per session, ensuring the local tool has not been modified.
Audit Metadata