EigenCloud
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
onchainosinstaller, its own plugin binaries, and management scripts from the official OKX GitHub repositories. These downloads are verified against SHA256 checksums provided by the vendor before any file is executed or installed. - [COMMAND_EXECUTION]: Executes the
onchainosCLI and theeigencloud-pluginbinary to manage wallet positions and submit restaking transactions. These executions are scoped to the skill's primary purpose and involve well-known developer tools. - [DATA_EXFILTRATION]: Performs network requests to a public Ethereum RPC (
ethereum.publicnode.com) for read-only blockchain queries. Sensitive operations, such as transaction signing, are handled locally by theonchainosCLI, and no sensitive data is transmitted to untrusted external domains. - [PROMPT_INJECTION]: Includes a strict 'Live Trading Confirmation Protocol' that instructs the AI agent to require explicit user verification, previews, and risk-limit checks before broadcasting transactions. These instructions serve as a safety guardrail rather than an injection attack.
Audit Metadata