okx-sentiment-tracker
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the '@okx_ai/okx-trade-cli' package from the npm registry. This is a scoped package belonging to the verified vendor ('okx') and is necessary for the skill's functionality.
- [COMMAND_EXECUTION]: The skill relies on the 'okx' CLI to perform read-only operations such as fetching news headlines, article details, and sentiment ratios. It also utilizes standard shell utilities like 'date' to calculate Unix timestamps for time-series queries.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external news sources (e.g., CoinDesk, CoinTelegraph) and the OKX news API to generate market summaries and detect sentiment shifts. While this presents an ingestion surface for potentially malicious instructions embedded in third-party content, the risk is inherent to news aggregation tasks and mitigated by the agent's internal safety filters.
- Ingestion points: External article content fetched via 'okx news detail' and web search results used for fallback analysis.
- Boundary markers: None explicitly defined in the workflow instructions.
- Capability inventory: Execution of CLI-based news queries and multi-step data aggregation logic.
- Sanitization: No explicit sanitization or filtering of article content is specified before interpolation into reports.
Audit Metadata