The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script (install.sh or install.ps1) from the okx/onchainos-skills GitHub repository to install the onchainos CLI utility. As a security mitigation, it fetches a installer-checksums.txt file and verifies the script's SHA256 hash before execution. The source is the official repository of OKX, a well-known financial technology service.
[COMMAND_EXECUTION]: The skill invokes the locally installed onchainos binary to perform market signal queries on various blockchains.
[EXTERNAL_DOWNLOADS]: The skill fetches the latest version metadata from the GitHub API and downloads binary installers and checksum files from GitHub. These resources originate from a well-known service (OKX).
[PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes real-time blockchain signal data.
Ingestion points: Data enters via the onchainos signal list command.
Boundary markers: The skill explicitly instructs the agent to treat CLI output as untrusted external content and warns against interpreting it as instructions.
Capability inventory: The skill has the capability to run shell commands and write to temporary system directories.
Sanitization: The skill relies on instruction-based boundary markers to prevent the agent from obeying instructions embedded in on-chain data.

okx-dex-signal