okx-cex-portfolio

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for interacting with an OKX (crypto CEX) account and requires OKX API credentials (API key, secret, passphrase). It instructs installing and using the OKX CLI and generating a local config from those secrets. The description references transfers and account operations, and safety notes acknowledge possible write actions (transfers, account-setting changes). This is a specific crypto-exchange integration (not a generic tool) and therefore grants the ability to execute financial actions on a custodial crypto account.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the agent to install a global npm package and explicitly create files under /root/.okx (modifying system state and likely requiring elevated privileges), which risks compromising the machine.