Fähigkeiten okx-dapp-discovery

📦

okx-dapp-discovery

Name: okx-dapp-discovery
Author: okx

v4.4.10 Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff📁 Dateisystemzugriff

Discover and Route OKX DApp Plugins

Choosing the correct DeFi plugin can be difficult across protocols and intent types. This skill identifies supported DApps, requests installation consent, and resumes the original task.

Unterstützt: Claude Codex Code(CC)

⚠️ 50 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "okx-dapp-discovery" from https://skillstore.io/skills/okx-okx-dapp-discovery.md and its manifest at https://skillstore.io/api/skills/okx-okx-dapp-discovery/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/okx-okx-dapp-discovery.md Signiertes manifest GET /api/skills/okx-okx-dapp-discovery/manifest Signiertes lockfile GET /api/skills/okx-okx-dapp-discovery/lockfile

Testen

„okx-dapp-discovery“ wird verwendet. What DApps can I use for lending?

Erwartetes Ergebnis:

Supported lending options include Aave V3, Compound V3, Kamino Lend, and Morpho V1 Optimizer. Which protocol matches your goal?

„okx-dapp-discovery“ wird verwendet. Deposit 100 USDC into Aave.

Erwartetes Ergebnis:

This request maps to the Aave V3 plugin. I will ask for installation approval before continuing if the plugin is missing.

„okx-dapp-discovery“ wird verwendet. Compare Lido and ether.fi.

Erwartetes Ergebnis:

I can discuss their tradeoffs or set up either plugin. No plugin will be installed until you choose.

Sicherheitsaudit

Mittleres Risiko

v1 • 20.8.2026 Versionsbericht öffnen

Most static findings are Markdown formatting, DeFi terminology, or protective consent guidance rather than dangerous behavior. Confirmed behavior includes `npx` execution, global plugin installation, and a user-approved GitHub catalog request. The mutable plugin source creates a medium supply-chain risk despite explicit consent and fetched-content safeguards.

Gescannte Dateien

620

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:196-214

Mutable Global Plugin Supply Chain

The workflow globally installs plugin documents from a registry reference without an immutable commit, version, or integrity digest. It then loads those remote instructions into the agent context.

The install command uses the mutable `okx/plugin-store` reference with `--global`, and no commit or digest verification is specified. Consent and fetched-content guards reduce impact.

Elemente der Fähigkeitsprüfung (7)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel

SKILL.md:177-192

Ruby/shell backtick execution

```bash

The Bash block runs `npx skills list` automatically to inspect installed plugins. `npx` can execute external package code and may fetch it when unavailable locally.

Mittel

SKILL.md:202-207

Ruby/shell backtick execution

```bash

The Bash block executes `npx skills add` with global installation after user confirmation. This runs external tooling and modifies the global skills directory.

Mittel

SKILL.md:238

Ruby/shell backtick execution

- **Failure mode:** if `npx skills add` fails (network/registry), tell the user: "I couldn't install

The failure guidance gives the user an executable `npx skills add` command that performs a global install. User initiation limits the risk, but the external command is real.

Mittel

SKILL.md:304-307

Ruby/shell backtick execution

```bash

The Bash block runs a curl and Python pipeline against GitHub after user approval. It is read-only, but it still executes external commands and processes remote data.

Mittel

SKILL.md:178

Shell command substitution

SKILLS_LIST=$(npx skills list 2>/dev/null)

The shell assignment executes `npx skills list` through command substitution. Its arguments are fixed, but it invokes external package code before install consent.

Mittel

SKILL.md:177-192

Template literal with command substitution

```bash

The fenced Bash block contains active shell command substitution around `npx skills list`. This is executable installation-state discovery, not a template literal.

Niedrig

SKILL.md:305

Hardcoded URL

curl -fsSL --max-time 5 "https://api.github.com/repos/okx/plugin-store/contents/skills" 2>/dev/null

The catalog lookup sends a read-only GET to the hardcoded GitHub API endpoint after explicit approval. The request is intentional and bounded, but network access is real.

Risikofaktoren

⚙️ Externe Befehle (50)

🌐 Netzwerkzugriff (2)

SKILL.md:12 SKILL.md:305

📁 Dateisystemzugriff (12)

SKILL.md:222 SKILL.md:224 SKILL.md:229 SKILL.md:173 SKILL.md:209 SKILL.md:222 SKILL.md:224 SKILL.md:229 SKILL.md:178 SKILL.md:305 SKILL.md:306 SKILL.md:224

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/okx-okx-dapp-discovery/security.svg)](https://skillstore.io/skills/okx-okx-dapp-discovery?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/okx-okx-dapp-discovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-dapp-discovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/okx-okx-dapp-discovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

okx. (2026). okx-dapp-discovery security audit report (audit version 1) [Author version 4.4.10]. Skillstore. https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1

BibTeX-Zitat

@techreport{okx-okx-okx-dapp-discovery-2026,
  author = {okx},
  title = {okx-dapp-discovery security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1},
  note = {Author version 4.4.10}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "okx-dapp-discovery security audit report (audit version 1)"
version: "4.4.10"
type: report
authors:
  - name: "okx"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1"
identifiers:
  - type: other
    value: "skillstore:okx-okx-dapp-discovery:audit:1"
    description: "Skillstore immutable audit report identifier"

Varianten vergleichen

2 installierbare Varianten

Jeder Autor bleibt ein eigener installierbarer Skill. Die empfohlene Variante wird nach Skillstore-Nachweisen bewertet.

Warum diese Variante zuerst steht

Höchster Skillstore-Score

Autor / Quelle Skillstore-Score Evidenzvertrauen Skillstore-Nutzung Aktualisiert

okx Empfohlen Aktuell

okx-okx-dapp-discovery

Skillstore-Score 50

Evidenzvertrauen Mittel

Skillstore-Nutzung 2

Aktualisiert

2026-09-09

internet-court

internet-court-okx-dapp-discovery

Skillstore-Score 38

Evidenzvertrauen Mittel

Skillstore-Nutzung 5

Aktualisiert

2026-09-09

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

100

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Find a Supported DApp

Review the available lending, trading, staking, prediction, and liquidity protocols before choosing one.

Route a Protocol Action

Map a named protocol action or native token request to the correct plugin and request installation approval.

Resolve Multilingual Intent

Interpret English or Chinese DApp requests while preserving protocol-specific routing and clarification rules.

Diese Prompts ausprobieren

List Supported DApps

Show the supported DApps by category and explain which option fits my goal: [goal].

Route a Direct Action

I want to [action] [amount and token] on [DApp]. Select the correct plugin and ask before installing it.

Compare Supported Protocols

Compare [DApp A] and [DApp B] for [goal]. Do not install anything until I choose.

Handle an Unknown DApp

Check whether [DApp] is supported. Show close alternatives and offer a catalog lookup without installing anything automatically.

Bewährte Praktiken

Name the DApp, action, token, and amount when requesting protocol routing.
Review every plugin installation prompt and transaction approval separately.
Use comparison prompts before installation when multiple protocols may fit.

Vermeiden

Do not paste private keys, seed phrases, API keys, passwords, or session tokens.
Do not treat plugin installation as approval for a blockchain transaction.
Do not expect unsupported protocol variants to map to the closest plugin automatically.

Häufig gestellte Fragen

Does this skill execute transactions?

No. It routes requests and loads plugins. Wallet approval is still required for every blockchain write.

Does it install plugins automatically?

No. A missing plugin requires explicit confirmation before installation.

Which protocols are supported?

The resolver covers 20 entries across prediction markets, lending, perpetuals, swaps, staking, yield trading, and meme launchpads.

Can it understand Chinese requests?

Yes. The included glossary defines Chinese aliases, actions, native-token phrases, and routing examples.

What happens when a DApp is unsupported?

It shows supported alternatives and can offer a user-approved, read-only catalog lookup.

Can it compare protocols without installing plugins?

Yes. Comparison requests can remain informational until you choose a protocol and approve installation.

Entwicklerdetails

Autor

okx

Lizenz

MIT

Autorenversion

v4.4.10

Skillstore-Revision

Repository

https://github.com/okx/onchainos-skills/tree/230f74137889420507e84706ab99204e71ddcad7/skills/okx-dapp-discovery

Ref.

bdb71a4bc34515f37772ae85fd5501f9c2ff33b0

Aktualität der Wartung

20.8.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📁 references/

📄 keyword-glossary.md

📄 protocol-keywords.md

📄 SKILL.md

Mehr von okx

Alle anzeigen

📦

okx-guide

Explore Onchain OS and OKX.AI

New users need clear paths through Onchain OS, OKX.AI roles, and support. This skill classifies requests and routes users into focused guided flows.

Dokumentation Ansehen

📦

okx-growth-competition

Manage OKX Trading Competitions

Tracking competition rules, registration, rankings, and rewards across wallet accounts is complex. This skill guides the complete OKX Agentic Wallet competition workflow.

Produktivität Ansehen

📦

okx-activity

Hackathon registration requires selecting an eligible Trading ASP and the correct competition account. This skill guides confirmation, submission, and result handling through OnchainOS.

Produktivität Ansehen

📦

okx-dex-market

Analyze On-Chain DEX Markets and Signals

DEX research often requires several data sources and command formats. This skill routes read-only market, token, wallet, social, and live signal queries through Onchain OS.

Daten & Analysen Ansehen

📦

okx-agent-payments-protocol

Handle Agent Payments Across x402 and MPP

Agent payment protocols require careful routing, decoding, signing, and settlement tracking. This skill guides supported OKX OnchainOS payment workflows through one dispatcher.

Produktivität Ansehen

Alle anzeigen

📦

blockchain-developer

Sichere Web3-Systeme entwickeln

von sickn33

Blockchain-Projekte benötigen eine sichere Architektur, getestete Contracts und klare Bereitstellungspläne. Dieser Skill unterstützt die Web3-Implementierung über Contracts, dApps, DeFi, NFTs, DAOs und Enterprise-Chains hinweg.

Programmierung & Entwicklung Ansehen

📦

defi-protocol-templates

Sicherere DeFi-Protokollvorlagen erstellen

von wshobson

DeFi-Teams benötigen wiederholbare Ausgangspunkte für gängige Smart-Contract-Protokolle. Diese Skill stellt Solidity-Vorlagen und Implementierungsleitfäden für Staking, AMMs, Governance, Lending und Flash Loans bereit.

Programmierung & Entwicklung Ansehen

📦

hft-quant-expert

Krypto-Quant-Trading-Strategien entwickeln

von BarisSozen

Teams für Krypto-Derivate benötigen belastbare Signale, Positionsgrößen und Backtests. Diese Skill unterstützt die DeFi-Trading-Forschung mit praxisnahen quantitativen Workflows und Risikoprüfungen.

Daten & Analysen Ansehen

📦

web3-testing

Smart Contracts mit Hardhat und Foundry testen

von wshobson

Smart-Contract-Teams benötigen wiederholbare Tests, bevor sie Protokolländerungen bereitstellen. Diese Skill bietet praktische Hardhat- und Foundry-Muster für Unit-Tests, Forks, Fuzzing, Gas-Prüfungen, Coverage und Verifizierung.

Sicherheit & Compliance Ansehen

📦

solidity-security

Solidity-Contracts sicher auditieren

von sickn33

Smart Contracts scheitern, wenn häufige Schwachstellen vor dem Deployment übersehen werden. Diese Skill führt Claude, Codex und Claude Code durch fokussierte Solidity-Sicherheitsreviews.

Sicherheit & Compliance Ansehen

📦

liquidity-depth-analyzer

DEX-Liquiditätstiefe analysieren

von BarisSozen

DEX-Swaps können fehlschlagen, wenn Liquiditätstiefe, Slippage oder Preisauswirkung unklar sind. Diese Skill leitet strukturierte Prüfungen für Pool-Tiefe, Routenqualität und Handelsgrößenbestimmung an.

Daten & Analysen Ansehen

okx-dapp-discovery

Mit meinem Agent installieren

Agent-lesbare Ressourcen

Testen

Sicherheitsaudit

Bestätigte Sicherheitsbedenken (1)

Risikofaktoren

Berichtslink kopieren

Markdown-Badge

HTML-Badge

Einbettungskarte

APA-Zitat

BibTeX-Zitat

CITATION.cff

Varianten vergleichen

Skillstore-Score

Was Sie erstellen können

Find a Supported DApp

Route a Protocol Action

Resolve Multilingual Intent

Diese Prompts ausprobieren

Bewährte Praktiken

Vermeiden

Häufig gestellte Fragen

Entwicklerdetails

Mehr von okx

okx-guide

okx-growth-competition

okx-activity

okx-dex-market

okx-agent-payments-protocol

Ähnliche Skills

blockchain-developer

defi-protocol-templates

hft-quant-expert

web3-testing

solidity-security

liquidity-depth-analyzer