okx-cex-bot
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for managing trading bots on the OKX centralized exchange and includes authenticated write operations that move/allocate real funds. It requires API credentials and a "live" profile for real funds, and exposes concrete commands to create and stop bots (e.g.
okx bot grid create,okx bot dca create,okx bot grid stop), parameters that specify investment amounts, leverage, and stop behaviors (includingstopType=1which sells/closes positions). It also lists MCP tools likedca_create_order/dca_stop_order. Because its primary and explicit purpose is to execute crypto market operations on OKX (create/stop bots that trade with real funds), it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata