okx-dex-trenches

SUSPICIOUS. The main memecoin research capability aligns with the stated purpose, and the installer source is same-org OKX GitHub with checksum verification, which lowers concern. But the skill still relies on remote script execution, expands into transitive wallet/swap workflows with real financial impact, and processes untrusted external token content while having command execution capability. No direct credential theft or clear malicious exfiltration is evident.