okx-cex-bot

Warn

Audited by Snyk on Mar 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for managing trading bots on the OKX centralized exchange and includes authenticated write operations that move/allocate real funds. It requires API credentials and a "live" profile for real funds, and exposes concrete commands to create and stop bots (e.g. okx bot grid create, okx bot dca create, okx bot grid stop), parameters that specify investment amounts, leverage, and stop behaviors (including stopType=1 which sells/closes positions). It also lists MCP tools like dca_create_order/dca_stop_order. Because its primary and explicit purpose is to execute crypto market operations on OKX (create/stop bots that trade with real funds), it grants direct financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 11:37 AM
Issues
1