okx-cex-portfolio

Pass

Audited by Gen Agent Trust Hub on May 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the @okx_ai/okx-trade-cli package, which is downloaded from the npm registry. This is the official command-line interface provided by OKX, a recognized and well-known service in the cryptocurrency industry.
  • [COMMAND_EXECUTION]: The skill performs operations by executing the okx CLI tool. It constructs commands using arguments derived from user input, such as currency symbols, transaction amounts, and instrument identifiers. This is the intended primary purpose of the skill for account management.
  • [DATA_EXFILTRATION]: Although the skill accesses private financial information (e.g., account balances and positions), the data is only handled through the official OKX CLI tool which communicates with OKX's own infrastructure. No suspicious outbound network requests to unauthorized or unknown domains were detected.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management practices. It specifically instructs the agent to never accept secrets in the chat and instead guides users to use a local configuration file (~/.okx/config.toml) or a secure OAuth-based browser flow for authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
May 22, 2026, 11:15 AM