okx-onchain-gateway

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill repeatedly requires the agent to accept and embed user-supplied signed transaction hexes (via the --signed-tx CLI argument) into commands/outputs verbatim, which forces the LLM to handle secret-like values directly and creates an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill performs runtime fetch-and-execute of remote installer scripts (e.g., curl "https://raw.githubusercontent.com/okx/onchainos-skills/${LATEST_TAG}/install.sh" followed by sh /tmp/onchainos-install.sh) and also queries the GitHub API at "https://api.github.com/repos/okx/onchainos-skills/releases/latest", which constitutes executing remote code and using remote content to control installation at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a blockchain transaction gateway: it accepts signed transactions and broadcasts them on-chain (including MEV protection parameters), returns order IDs, and provides gas estimation, simulation, and order tracking. Broadcasting signed transactions is a direct crypto fund movement operation (final-mile execution). Although it does not sign transactions, it performs the on-chain execution step and therefore grants direct financial execution capability.