okx-defi-invest
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed for on-chain financial operations (DeFi). It provides dedicated commands for investing, withdrawing, claiming rewards, borrowing/repaying, adding/removing liquidity, and other money-moving actions (e.g.,
defi invest,defi withdraw,defi collect). It returns transaction calldata and provides explicit sign-and-broadcast flows (Path A: broadcast signed tx via onchainos gateway; Path B:onchainos wallet contract-callwhich "handles TEE signing and broadcasting internally"). It requires wallet address resolution, balance checks, position-detail validation, and enforces execution rules for broadcasting on-chain transactions. These are specific crypto/blockchain wallet and transaction-signing/broadcasting capabilities (not generic tools), so this skill grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata