okx-dex-social
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The pre-flight process involves downloading a shell script (install.sh or install.ps1) from the official OKX GitHub repository and executing it to maintain the underlying CLI tools.
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration, installer scripts, and integrity checksums from api.github.com and raw.githubusercontent.com, specifically targeting the official OKX organization repositories.
- [PROMPT_INJECTION]: The skill processes external, untrusted content such as crypto news articles and KOL social data. This creates a surface for indirect prompt injection, although the skill includes instructions to treat this content as untrusted and provides mechanisms to strip certain data fields for compliance.
- [COMMAND_EXECUTION]: The skill executes the onchainos command-line utility and standard shell tools like curl, sh, and shasum to perform its functions and verify file integrity.
Audit Metadata