Fähigkeiten okx-agentic-wallet
📦

okx-agentic-wallet

v4.6.6 Inhaltsrevision r1 Hohes Risiko 📁 Dateisystemzugriff⚙️ Externe Befehle🌐 Netzwerkzugriff

Manage OKX Wallets and On-Chain Transactions

Managing wallets across chains requires careful address checks, fee review, and transaction tracking. This skill guides Onchain OS CLI workflows for holdings, transfers, swaps, bridges, and security checks.

Unterstützt: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "okx-agentic-wallet" from https://skillstore.io/skills/okx-okx-agentic-wallet.md and its manifest at https://skillstore.io/api/skills/okx-okx-agentic-wallet/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/okx-okx-agentic-wallet.md Signiertes manifest GET /api/skills/okx-okx-agentic-wallet/manifest Signiertes lockfile GET /api/skills/okx-okx-agentic-wallet/lockfile

Testen

„okx-agentic-wallet“ wird verwendet. Show my holdings without changing anything.

Erwartetes Ergebnis:

  • Illustrative result: Active account: Primary.
  • Ethereum holdings: 0.20 ETH and 150 USDC.
  • No transactions were submitted.

„okx-agentic-wallet“ wird verwendet. Compare bridge options but do not send funds.

Erwartetes Ergebnis:

  • Illustrative comparison: Route A estimates 99.50 USDC received, with a 0.50 USDC bridge fee.
  • Route B estimates 99.20 USDC received, with a 0.80 USDC bridge fee.
  • Source-chain gas is additional. Quotes can change. No bridge transaction was submitted.

„okx-agentic-wallet“ wird verwendet. The token security scan failed. What happens next?

Erwartetes Ergebnis:

  • Token verification is unavailable. No safety conclusion can be drawn.
  • Pause the trade and retry the scan before authorizing execution.

Sicherheitsaudit

Hohes Risiko
v1 • 28.10.2026 Versionsbericht öffnen

All 116 static matches are false positives for the reported patterns: documentation formatting, wallet identifiers, protective secret references, and legitimate paths or URLs. Semantic review found failed-scan continuation, conflicting swap-block rules, returned-command execution without specified validation, and an unpinned preflight installer. No evidence found of credential exfiltration or audit-directed prompt injection; external CLI and backend implementations were not verified.

32
Gescannte Dateien
3,264
Analysierte Zeilen
0
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (4)

Hoch
references/security.md:35
Swap Security Scans Fail Open
Swap token-scan failures automatically continue with a warning, and unsupported scan chains do not block. Trading can proceed without completed token-risk verification.
The swap exception explicitly removes the general retry-or-consent pause after scan failure. This creates a verification gap, not evidence of malicious intent.
Hoch
references/swap.md:58references/swap.md:106-120SKILL.md:99-101
Conflicting Rules Permit Blocked Swap Overrides
The swap flow says blocked routes must not broadcast, but later rules say BLOCK requires an explicit override, including blacklisted addresses. This weakens mandatory stops.
Directly conflicting instructions distinguish neither overridable warnings nor immutable blocks. An agent can interpret later override guidance as authorization to trade blocked assets.
Hoch
SKILL.md:80-86references/bridge.md:82-89references/bridge-cli-reference.md:92
Returned Command Strings Cross the Execution Boundary
The skill follows returned next commands and uses returned bridge-status commands verbatim. It specifies no command allowlist or argument validation before execution.
The execution instructions directly trust returned command strings despite declaring CLI output untrusted. Exploitation depends on influencing those fields; no injected payload was found.
Mittel
SKILL.md:45-47
Mandatory Preflight Runs an Unpinned Installer
The required preflight delegates to an automatically approved npx installer without a package version. Registry-delivered code runs before wallet operations without separate installation consent.
The cited line mandates the linked preflight, which runs npx -y @okxweb3/onchainos-installer. Its skill-version argument does not pin the installer package.

Risikofaktoren

📁 Dateisystemzugriff (6)
references/audit-log.md:9 references/audit-log.md:9 references/security.md:68 references/security.md:68 references/wallet.md:55 references/wallet.md:56
⚙️ Externe Befehle (24)
references/bridge.md:38 SKILL.md:16 SKILL.md:34 SKILL.md:39 SKILL.md:51 SKILL.md:54 SKILL.md:58 SKILL.md:64 SKILL.md:65 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:80 SKILL.md:82 SKILL.md:83 SKILL.md:86 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:98 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:104
🌐 Netzwerkzugriff (5)
references/gas-station.md:54 references/security-cli-reference.md:55 references/swap.md:41 SKILL.md:15 SKILL.md:8
Geprüft von: codex
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/okx-okx-agentic-wallet/security.svg)](https://skillstore.io/skills/okx-okx-agentic-wallet?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/okx-okx-agentic-wallet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-agentic-wallet/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/okx-okx-agentic-wallet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

okx. (2026). okx-agentic-wallet security audit report (audit version 1) [Author version 4.6.6]. Skillstore. https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1

BibTeX-Zitat

@techreport{okx-okx-okx-agentic-wallet-2026, author = {okx}, title = {okx-agentic-wallet security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1}, note = {Author version 4.6.6} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "okx-agentic-wallet security audit report (audit version 1)" version: "4.6.6" type: report authors: - name: "okx" date-released: "2026-10-28" url: "https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1" identifiers: - type: other value: "skillstore:okx-okx-agentic-wallet:audit:1" description: "Skillstore immutable audit report identifier"

Varianten vergleichen

2 installierbare Varianten

Jeder Autor bleibt ein eigener installierbarer Skill. Die empfohlene Variante wird nach Skillstore-Nachweisen bewertet.

Warum diese Variante zuerst steht

Höhere Skillstore-Nutzung
internet-court Empfohlen

internet-court-okx-agentic-wallet

Skillstore-Score 38
Evidenzvertrauen Mittel
Skillstore-Nutzung 10
Aktualisiert

2026-09-09

okx Aktuell

okx-okx-agentic-wallet

Skillstore-Score 38
Evidenzvertrauen Mittel
Skillstore-Nutzung 2
Aktualisiert

2026-10-28

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
45
Architektur
100
Wartbarkeit
87
Inhalt
65
Gemeinschaft
100
Spezifikationskonformität

Was Sie erstellen können

Review Personal Wallet Holdings

Inspect account balances, receive addresses, and transaction history without requesting transfers or disclosing credentials.

Compare Swap and Bridge Routes

Review token identities, expected proceeds, fees, and route risks before deciding whether to authorize a transaction.

Inspect Transaction and Approval Risks

Check contract interactions, inspect token allowances, and prepare revocations with simulation and explicit confirmation.

Diese Prompts ausprobieren

Check Wallet Balances 
Show my current wallet account and token balances. Use read-only queries. Do not transfer funds or reveal credentials.
Review a Token Transfer 
Prepare a transfer of [amount] [token] on [chain] to [full recipient address]. Show fees and checks. Wait for confirmation before sending.
Compare Bridge Routes 
Compare routes for [amount] [token] from [source chain] to [destination chain]. Show fees and minimum receipts. Do not execute.
Audit Approvals Before Revocation 
Inspect token approvals for [public address] on [chain]. Explain flagged spenders and prepare bounded revocations. Stop if scans fail. Confirm each write separately.

Bewährte Praktiken

  • Use a limited-balance wallet and configure spending limits and destination allowlists through the official portal before authorizing transactions.
  • Verify full addresses, chain, token identity, fees, and slippage against fresh CLI output before confirming each write.
  • Pause when scans fail or return BLOCK. Validate returned commands against documented syntax instead of executing arbitrary response strings.

Vermeiden

  • Sharing seed phrases, private keys, API credentials, or session tokens in the conversation.
  • Treating transaction broadcast, request acceptance, or a funding notification as final settlement or renewed transfer authorization.
  • Using force flags on the first attempt, bypassing blocked verdicts, or assuming a failed scan means an asset is safe.

Häufig gestellte Fragen

Which AI tools can use this skill?
The report lists Claude, Codex, and Claude Code. Actual execution also requires compatible command access and the external Onchain OS CLI.
Does every operation require wallet login?
No. Public-address portfolio queries and security checks can work without login. Wallet writes and limit orders require an authenticated account.
Can the agent export my seed phrase?
No. Export is a user action in the official wallet application or extension. Never share the resulting phrase with the agent.
Will it ask before sending funds?
The main rules require explicit confirmation before writes. Automated modes require prior opt-in. Conflicting swap-block instructions remain an audit concern.
Are swaps and limit orders available on every chain?
No. Support varies by command and backend. Limit orders list Ethereum, BSC, X Layer, Solana, Base, and Arbitrum.
Does a completed security scan guarantee safety?
No. Results cover only the checks performed. Failed scans provide no verification, and some documented swap paths continue with warnings.

Entwicklerdetails

Autor

okx

Lizenz

MIT

Autorenversion

v4.6.6

Skillstore-Revision

r1

Repository

https://github.com/okx/onchainos-skills/tree/35a8c41cc6516844ae7dbedf02616bf4ea97d6ed/skills/okx-agentic-wallet

Ref.

68ad52c83048aa55fba46a90f4f6c6d9922a47b0

Aktualität der Wartung

28.10.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📁 _shared/

📄 chain-support.md

📄 preflight.md

📁 references/

📄 account-faq.md

📄 audit-log.md

📄 brc20-cli-reference.md

📄 bridge-cli-reference.md

📄 bridge-troubleshooting.md

📄 bridge.md

📄 funding.md

📄 gas-station-troubleshooting.md

📄 gas-station.md

📄 gateway-cli-reference.md

📄 gateway.md

📄 portfolio-cli-reference.md

📄 portfolio.md

📄 security-cli-reference.md

📄 security.md

📄 strategy-cli-reference.md

📄 strategy-troubleshooting.md

📄 strategy.md

📄 swap-cli-reference.md

📄 swap-troubleshooting.md

📄 swap.md

📄 utxo-cli-reference.md

📄 utxo-faq.md

📄 wallet-cli-reference.md

📄 wallet-mev-protection.md

📄 wallet-plugin-preflight.md

📄 wallet-portal-actions.md

📄 wallet-troubleshooting.md

📄 wallet.md

📄 SKILL.md

Mehr von okx

Alle anzeigen

Ähnliche Skills

Alle anzeigen