okx-cex-portfolio
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the @okx_ai/okx-trade-cli package from the public npm registry during the prerequisites phase.
- [COMMAND_EXECUTION]: The skill executes shell commands to install the CLI globally and generates a configuration file at /root/.okx/config.toml to store sensitive API credentials for the OKX account.
- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing account-related data from the OKX API. 1. Ingestion points: Data entering the context includes account balances, positions, and history from okx account commands. 2. Boundary markers: No delimiters or ignore instructions are used when interpolating tool output into the agent's context. 3. Capability inventory: The skill can execute shell commands, manage files, and perform network operations via the okx CLI. 4. Sanitization: No explicit validation or filtering of external API data is performed before summarizing it for the user.
Audit Metadata