okx-dex-social

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The docs instruct automated downloading and execution of installer scripts and remote binaries from GitHub releases (curl/Invoke-WebRequest + sh execution) and rely on remote checksums—this is a supply-chain / remote code execution risk (high-risk pattern) though no explicit data-exfiltration or hidden backdoor code is present in the files themselves.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime workflow calls onchainos social news-search/news-latest/news-by-symbol to retrieve third-party articles[].title/summary and—via news-detail or --detail-level 2—the full articles[].content, plus vibe-top-kols/vibe-timeline sample KOL handles/nicknames and firstMention tweet URLs, all of which are outsider-authored free text from external platforms.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The preflight steps fetch and execute remote installer code (and related checksums) at runtime via URLs such as https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh which is downloaded and run (sh /tmp/onchainos-install.sh), creating a high-risk runtime external dependency.