okx

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with its stated OKX crypto purpose, but its footprint is mostly transitive installation plus remote script execution. No direct credential exfiltration or mismatched data routing is shown here, yet the skill meaningfully expands trust to upstream skills and an externally installed CLI that can perform real on-chain actions.

Confidence: 86%Severity: 55%
Audit Metadata
Analyzed At
Sep 15, 2026, 03:34 AM
Package URL
pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Fokx%2F@59fd28fd8de1e5ec3200669a301a7ef246c65745c839c57f3da4f0c130a9e0f0
Security Audit — socket — okx