mainstream-spot-order
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment via shell commands to manage the trading lifecycle and communicate with the blockchain CLI tool.
- Evidence:
okx.pyusessubprocess.runto call theonchainosCLI for operations such as wallet status checks, fetching market data, and broadcasting transactions. - Evidence:
SKILL.mdprovides instructions for the agent to manage long-running background tasks using standard shell commands likenohupandps. - [EXTERNAL_DOWNLOADS]: The system fetches market data from official vendor endpoints to drive its trading signals and backtesting engine.
- Evidence:
okx.pyuses the standard Pythonurlliblibrary to retrieve candle data fromhttps://www.okx.com/api/v5/dex/market/candles. - [SAFE]: The skill incorporates robust security protocols for managing autonomous trading and high-risk operations.
- Evidence: The 'Security: External Data Boundary' section in
SKILL.mdprevents the agent from interpreting API responses as instructions. - Evidence: The 'Live Trading Confirmation Protocol' ensures that real funds are never committed without the user's explicit session-level authorization.
- Evidence: Transaction signing is performed in a Trusted Execution Environment (TEE) via the Agentic Wallet, ensuring private keys are never exposed to the local filesystem or logs.
Audit Metadata