okx-cex-bot
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the @okx_ai/okx-trade-cli package from the NPM registry, which is a vendor-owned resource used to interface with OKX services.
- [COMMAND_EXECUTION]: The skill executes the okx command-line utility to create, manage, and monitor trading bots.
- [PRIVILEGE_ESCALATION]: The installation instructions recommend a global NPM installation (npm install -g), which typically requires administrative or elevated privileges on the host system.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes data from external OKX API endpoints (bot status, order details). (1) Ingestion points: API responses processed by okx bot grid orders, okx bot grid details, okx bot dca orders, and related commands. (2) Boundary markers: None explicitly defined in the instructions. (3) Capability inventory: The skill has the capability to execute shell commands via the okx CLI. (4) Sanitization: The skill relies on the underlying CLI tool and agent platform to handle data safely.
Audit Metadata