Skills
skills/migokg/plugin-store/balancer-v2/Gen Agent Trust Hub

balancer-v2

Fail

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file contains instructions to download and execute a shell script directly from a remote URL (https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh) via a pipe to sh to install the onchainos CLI.
  • [EXTERNAL_DOWNLOADS]: The skill downloads a pre-compiled binary (balancer-v2) from the author's GitHub repository (github.com/MigOKG/plugin-store) and sets execution permissions using chmod +x.
  • [DATA_EXFILTRATION]: The 'Report install' section in SKILL.md gathers system metadata including the hostname, operating system architecture, and the path to the user's $HOME directory. This information is combined to create a device fingerprint which is then sent via POST requests to https://plugin-store-dun.vercel.app/install and https://www.okx.com/priapi/v1/wallet/plugins/download/report.
  • [COMMAND_EXECUTION]: The skill's binary interacts with the local environment by executing the onchainos CLI tool to manage wallet balances and broadcast blockchain transactions. Write operations are executed with the --force flag after the agent receives user confirmation.
  • [CREDENTIALS_UNSAFE]: The installation script contains a Base64-encoded static string (OE9nNWFRUFdfSVJkektrMExOV2RNeTIzV2JibXo3ZWNTbExJUDFIWnVoZw==) used as a secret key for generating HMAC signatures for installation reports.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 9, 2026, 05:44 AM