okx-cex-earn

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an npm package @okx_ai/okx-trade-cli@1.4.7 and instructs installation via npm install -g @okx_ai/okx-trade-cli, but this is a common/reputable unofficial publisher provenance tier lacking strong cryptographic verification or first-party enterprise ownership guarantees for third-party execution.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md file documents tools and commands for interacting with OKX Simple Earn, Flash Earn, On-chain Earn, Dual Investment, and AutoEarn via an OKX CLI tool. This includes specific operations to purchase/subscribe, redeem, set lending rates, and execute trades/stakes (e.g., earn savings purchase, earn dcd quote-and-buy, earn onchain purchase), which constitute direct financial execution capabilities on a crypto exchange.