okx-outcomes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs (at runtime) to run and pipe the remote installer script to a shell—curl -fsSL https://raw.githubusercontent.com/okx/outcomes-cli/main/install.sh | sh—thus fetching and executing remote code that the skill relies on for the binary.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill explicitly exposes trading and on-chain write commands (e.g., clob create-order, clob market-order, cancel-all, ctf split/merge/redeem), requires a signing wallet/private key for those writes, and describes the full flow for placing orders (dry-run then execute and verify). Those are specific financial execution capabilities (placing/canceling orders, redeeming, signing transactions) — not generic tooling — so it grants Direct Financial Execution Authority.