okx-cex-bot
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@okx_ai/okx-trade-clipackage from the npm registry. This package is a vendor-owned resource associated with the author 'okx' and is used to facilitate bot management. - [COMMAND_EXECUTION]: The skill utilizes the
okxCLI to perform authenticated operations on the exchange, including creating, stopping, and monitoring automated trading strategies. All write operations (creating/stopping bots) include instructions for user confirmation before execution. - [SAFE]: The instructions include robust security guidance, specifically warning the agent to never accept API keys, secret keys, or passphrases directly within the conversation. It directs users to use local configuration files (
~/.okx/config.toml) or environment variables, which prevents sensitive credentials from being stored in chat logs or processed by the model context in an unsafe manner.
Audit Metadata