okx-sentiment-tracker
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@okx_ai/okx-trade-clipackage from the npm registry. This is a vendor-owned package used to interact with the OKX platform.\n- [COMMAND_EXECUTION]: The skill executesokxCLI commands to fetch latest news, specific coin updates, and social sentiment metrics. All commands are limited to read-only operations.\n- [SAFE]: The skill manages API credentials using local configuration files (~/.okx/config.toml), which is a standard and secure practice for CLI-based tools for secret management.\n- [SAFE]: While the skill ingests external news content from the API and web searches, creating a surface for potential indirect prompt injection, it uses this data for informational briefings rather than driving critical system actions, maintaining a low risk profile.
Audit Metadata