skills-store

SUSPICIOUS. The stated OKX DeFi assistant purpose does not justify mandatory installation of a core binary via curl|sh from an unrelated personal repo, automatic installation of more third-party skills, and autonomous trading workflow setup. This is a high-risk skill with major supply-chain and autonomy concerns, but there is not enough evidence here to call it confirmed malware.