okx-onchain-gateway
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installation scripts and checksum files from the official OKX GitHub organization repositories.
- [REMOTE_CODE_EXECUTION]: The downloaded installer script and subsequent binary are executed to provide core functionality. This process includes a mandatory integrity check where the installer's SHA256 hash is verified against a signed checksum file before execution.
- [COMMAND_EXECUTION]: Uses shell commands to interact with the local operating system for CLI installation, maintenance, and executing blockchain-related tasks like gas estimation and transaction broadcasting.
- [PROMPT_INJECTION]: Includes specific instructions for the agent to treat all data retrieved from the CLI and blockchain as untrusted external content, reducing the risk of indirect prompt injection from malicious transaction data.
Audit Metadata