Relay
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's setup process fetches several necessary components, including the onchainos CLI installer and the relay-plugin binary, from the author's official GitHub repositories (github.com/okx). Each download is accompanied by a checksum verification step to ensure file integrity.
- [REMOTE_CODE_EXECUTION]: During initial configuration, the skill executes bash scripts and binaries downloaded from the vendor's repository. These operations are restricted to the setup phase and are used to install the core plugin and manage skill updates, utilizing verified sources to mitigate risks.
- [COMMAND_EXECUTION]: The plugin's core functionality relies on executing the onchainos CLI tool to retrieve wallet addresses and broadcast contract calls. These commands are critical for the bridging process and are only invoked for intended operations or upon explicit user confirmation for financial transactions.
Audit Metadata