spark-savings-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata, installation scripts, and binary releases from the official GitHub repositories of the okx organization. These downloads include integrity checks using SHA256 checksums to ensure file authenticity.
- [REMOTE_CODE_EXECUTION]: During the setup phase, the skill downloads and executes an installation script from the okx/onchainos-skills repository and uses
npxto install managed skills from the okx/plugin-store. These operations are restricted to the vendor's trusted infrastructure. - [COMMAND_EXECUTION]: The skill interacts with the local environment using the
onchainosCLI to perform wallet address resolution, balance checks, and EVM contract calls for decentralized finance operations. - [SAFE]: The skill implements a 'Live Trading Confirmation Protocol' that enforces paper-mode by default and requires explicit, typed user confirmation before any real on-chain transaction can be broadcast. It also provides transaction previews for user review.
Audit Metadata