okx-defi-invest

Warn

Audited by Snyk on Mar 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed for on-chain financial operations (DeFi). It provides dedicated commands for investing, withdrawing, claiming rewards, borrowing/repaying, adding/removing liquidity, and other money-moving actions (e.g., defi invest, defi withdraw, defi collect). It returns transaction calldata and provides explicit sign-and-broadcast flows (Path A: broadcast signed tx via onchainos gateway; Path B: onchainos wallet contract-call which "handles TEE signing and broadcasting internally"). It requires wallet address resolution, balance checks, position-detail validation, and enforces execution rules for broadcasting on-chain transactions. These are specific crypto/blockchain wallet and transaction-signing/broadcasting capabilities (not generic tools), so this skill grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 02:28 PM
Issues
1