gmx-v2-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads and ingests GMX V2 API market lists, price tickers, and token lists from api_base and api_fallback URLs, which return untrusted remote JSON data.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill fetches update scripts from https://raw.githubusercontent.com/okx/plugin-store/main/ and installs dependencies from an unofficial GitHub repository at runtime via npx skills add okx/plugin-store, which is a common/reputable unofficial operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct financial workflow by executing trades, leveraged positions, pool deposits/withdrawals, and claims on GMX V2 smart contracts via the onchainos CLI wallet contract-call interface. Access control relies on local CLI login/wallet state (onchainos wallet status), which is agent-managed or locally stored rather than an independent service/execution layer credential check preventing unauthorized instruction execution. Therefore, direct financial operations are present without established qualifying independent control.