skills/okx/plugin-store/EigenCloud/Gen Agent Trust Hub

EigenCloud

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the onchainos installer, its own plugin binaries, and management scripts from the official OKX GitHub repositories. These downloads are verified against SHA256 checksums provided by the vendor before any file is executed or installed.
  • [COMMAND_EXECUTION]: Executes the onchainos CLI and the eigencloud-plugin binary to manage wallet positions and submit restaking transactions. These executions are scoped to the skill's primary purpose and involve well-known developer tools.
  • [DATA_EXFILTRATION]: Performs network requests to a public Ethereum RPC (ethereum.publicnode.com) for read-only blockchain queries. Sensitive operations, such as transaction signing, are handled locally by the onchainos CLI, and no sensitive data is transmitted to untrusted external domains.
  • [PROMPT_INJECTION]: Includes a strict 'Live Trading Confirmation Protocol' that instructs the AI agent to require explicit user verification, previews, and risk-limit checks before broadcasting transactions. These instructions serve as a safety guardrail rather than an injection attack.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 03:28 AM
Security Audit — agent-trust-hub — EigenCloud