📦
okx-guide
38Explore Onchain OS and OKX.AI
New users need clear paths through Onchain OS, OKX.AI roles, and support. This skill classifies requests and routes users into focused guided flows.
Documentación Ver
Habilidades okx-dapp-discovery
📦
okx-dapp-discovery
v4.4.10 Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos
Discover and Route OKX DApp Plugins
Choosing the correct DeFi plugin can be difficult across protocols and intent types. This skill identifies supported DApps, requests installation consent, and resumes the original task.
Compatible con: Claude Codex Code(CC)
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "okx-dapp-discovery" from https://skillstore.io/skills/okx-okx-dapp-discovery.md and its manifest at https://skillstore.io/api/skills/okx-okx-dapp-discovery/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "okx-dapp-discovery". What DApps can I use for lending?
Resultado esperado:
Supported lending options include Aave V3, Compound V3, Kamino Lend, and Morpho V1 Optimizer. Which protocol matches your goal?
Usando "okx-dapp-discovery". Deposit 100 USDC into Aave.
Resultado esperado:
This request maps to the Aave V3 plugin. I will ask for installation approval before continuing if the plugin is missing.
Usando "okx-dapp-discovery". Compare Lido and ether.fi.
Resultado esperado:
I can discuss their tradeoffs or set up either plugin. No plugin will be installed until you choose.
Auditoría de seguridad
Riesgo mediov1 • 20/8/2026 Abrir el informe versionado
Most static findings are Markdown formatting, DeFi terminology, or protective consent guidance rather than dangerous behavior. Confirmed behavior includes `npx` execution, global plugin installation, and a user-approved GitHub catalog request. The mutable plugin source creates a medium supply-chain risk despite explicit consent and fetched-content safeguards.
3
Archivos escaneados
620
Líneas analizadas
7
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Medio
Mutable Global Plugin Supply Chain
The workflow globally installs plugin documents from a registry reference without an immutable commit, version, or integrity digest. It then loads those remote instructions into the agent context.
The install command uses the mutable `okx/plugin-store` reference with `--global`, and no commit or digest verification is specified. Consent and fetched-content guards reduce impact.
Elementos de revisión de capacidades (7)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Ruby/shell backtick execution
```bash
The Bash block runs `npx skills list` automatically to inspect installed plugins. `npx` can execute external package code and may fetch it when unavailable locally.
Medio
Ruby/shell backtick execution
```bash
The Bash block executes `npx skills add` with global installation after user confirmation. This runs external tooling and modifies the global skills directory.
Medio
Ruby/shell backtick execution
- **Failure mode:** if `npx skills add` fails (network/registry), tell the user: "I couldn't install
The failure guidance gives the user an executable `npx skills add` command that performs a global install. User initiation limits the risk, but the external command is real.
Medio
Ruby/shell backtick execution
```bash
The Bash block runs a curl and Python pipeline against GitHub after user approval. It is read-only, but it still executes external commands and processes remote data.
Medio
Shell command substitution
SKILLS_LIST=$(npx skills list 2>/dev/null)
The shell assignment executes `npx skills list` through command substitution. Its arguments are fixed, but it invokes external package code before install consent.
Medio
Template literal with command substitution
```bash
The fenced Bash block contains active shell command substitution around `npx skills list`. This is executable installation-state discovery, not a template literal.
Bajo
Hardcoded URL
curl -fsSL --max-time 5 "https://api.github.com/repos/okx/plugin-store/contents/skills" 2>/dev/null
The catalog lookup sends a read-only GET to the hardcoded GitHub API endpoint after explicit approval. The request is intentional and bounded, but network access is real.
Factores de riesgo
⚙️ Comandos externos (50)
SKILL.md:6 SKILL.md:19 SKILL.md:29 SKILL.md:31 SKILL.md:35 SKILL.md:37 SKILL.md:38 SKILL.md:44 SKILL.md:76 SKILL.md:86 SKILL.md:90 SKILL.md:96 SKILL.md:100 SKILL.md:102 SKILL.md:104 SKILL.md:112 SKILL.md:114 SKILL.md:116 SKILL.md:127 SKILL.md:131 SKILL.md:133 SKILL.md:138 SKILL.md:142 SKILL.md:143 SKILL.md:146 SKILL.md:171 SKILL.md:173 SKILL.md:177-192 SKILL.md:192-196 SKILL.md:196 SKILL.md:198 SKILL.md:200 SKILL.md:202-207 SKILL.md:207-208 SKILL.md:208-210 SKILL.md:210-212 SKILL.md:212 SKILL.md:214-222 SKILL.md:222-224 SKILL.md:224 SKILL.md:226 SKILL.md:229 SKILL.md:231-237 SKILL.md:237-238 SKILL.md:238 SKILL.md:244-248 SKILL.md:248-249 SKILL.md:249-250 SKILL.md:250-251 SKILL.md:251-252
🌐 Acceso a red (2)
📁 Acceso al sistema de archivos (12)
Auditado por: codex
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/okx-okx-dapp-discovery?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/okx-okx-dapp-discovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-dapp-discovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/okx-okx-dapp-discovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
okx. (2026). okx-dapp-discovery security audit report (audit version 1) [Author version 4.4.10]. Skillstore. https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1Cita BibTeX
@techreport{okx-okx-okx-dapp-discovery-2026,
author = {okx},
title = {okx-dapp-discovery security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1},
note = {Author version 4.4.10}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "okx-dapp-discovery security audit report (audit version 1)"
version: "4.4.10"
type: report
authors:
- name: "okx"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/okx-okx-dapp-discovery/audits/1"
identifiers:
- type: other
value: "skillstore:okx-okx-dapp-discovery:audit:1"
description: "Skillstore immutable audit report identifier"
Comparar variantes
2 variantes instalablesCada autor sigue siendo un skill instalable independiente. La variante recomendada se ordena según la evidencia de Skillstore.
Por qué esta variante es la primera
Mayor puntuación de Skillstore
Autor / fuente Puntuación de Skillstore Confianza de la evidencia Uso en Skillstore Actualizado
okx-okx-dapp-discovery
Puntuación de Skillstore 50
Confianza de la evidencia Medio
Uso en Skillstore 2
Actualizado
2026-09-09
internet-court-okx-dapp-discovery
Puntuación de Skillstore 38
Confianza de la evidencia Medio
Uso en Skillstore 5
Actualizado
2026-09-09
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 41
Arquitectura
100
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación
Lo que puedes crear
Find a Supported DApp
Review the available lending, trading, staking, prediction, and liquidity protocols before choosing one.
Route a Protocol Action
Map a named protocol action or native token request to the correct plugin and request installation approval.
Resolve Multilingual Intent
Interpret English or Chinese DApp requests while preserving protocol-specific routing and clarification rules.
Prueba estos prompts
List Supported DApps
Show the supported DApps by category and explain which option fits my goal: [goal].
Route a Direct Action
I want to [action] [amount and token] on [DApp]. Select the correct plugin and ask before installing it.
Compare Supported Protocols
Compare [DApp A] and [DApp B] for [goal]. Do not install anything until I choose.
Handle an Unknown DApp
Check whether [DApp] is supported. Show close alternatives and offer a catalog lookup without installing anything automatically.
Mejores prácticas
- Name the DApp, action, token, and amount when requesting protocol routing.
- Review every plugin installation prompt and transaction approval separately.
- Use comparison prompts before installation when multiple protocols may fit.
Evitar
- Do not paste private keys, seed phrases, API keys, passwords, or session tokens.
- Do not treat plugin installation as approval for a blockchain transaction.
- Do not expect unsupported protocol variants to map to the closest plugin automatically.
Preguntas frecuentes
Does this skill execute transactions?
No. It routes requests and loads plugins. Wallet approval is still required for every blockchain write.
Does it install plugins automatically?
No. A missing plugin requires explicit confirmation before installation.
Which protocols are supported?
The resolver covers 20 entries across prediction markets, lending, perpetuals, swaps, staking, yield trading, and meme launchpads.
Can it understand Chinese requests?
Yes. The included glossary defines Chinese aliases, actions, native-token phrases, and routing examples.
What happens when a DApp is unsupported?
It shows supported alternatives and can offer a user-approved, read-only catalog lookup.
Can it compare protocols without installing plugins?
Yes. Comparison requests can remain informational until you choose a protocol and approve installation.
Detalles del desarrollador
Autor
okxLicencia
MIT
Versión del autor
v4.4.10
Revisión de Skillstore
r1
Ref.
bdb71a4bc34515f37772ae85fd5501f9c2ff33b0
Actualidad del mantenimiento
20/8/2026
Uso
0 descargas · 0 vistas
Estructura de archivos
Más de okx
Ver todo📦
okx-growth-competition
38Manage OKX Trading Competitions
Tracking competition rules, registration, rankings, and rewards across wallet accounts is complex. This skill guides the complete OKX Agentic Wallet competition workflow.
Productividad Ver
📦
okx-activity
38Register an ASP for the OKX.AI Hackathon
Hackathon registration requires selecting an eligible Trading ASP and the correct competition account. This skill guides confirmation, submission, and result handling through OnchainOS.
Productividad Ver
📦
okx-dex-market
38Analyze On-Chain DEX Markets and Signals
DEX research often requires several data sources and command formats. This skill routes read-only market, token, wallet, social, and live signal queries through Onchain OS.
Datos y analítica Ver
📦
okx-agent-payments-protocol
38Handle Agent Payments Across x402 and MPP
Agent payment protocols require careful routing, decoding, signing, and settlement tracking. This skill guides supported OKX OnchainOS payment workflows through one dispatcher.
Productividad Ver
Habilidades relacionadas
Ver todo📦
blockchain-developer
78Construye sistemas Web3 seguros
por sickn33
Los proyectos blockchain necesitan una arquitectura segura, contratos probados y planes de despliegue claros. Esta skill guía la implementación Web3 en contratos, dApps, DeFi, NFTs, DAOs y cadenas empresariales.
Programación y desarrollo Ver
📦
defi-protocol-templates
71Crear plantillas más seguras para protocolos DeFi
por wshobson
Los equipos DeFi necesitan puntos de partida repetibles para protocolos comunes de smart contracts. Esta skill proporciona plantillas en Solidity y orientación de implementación para staking, AMM, gobernanza, préstamos y flash loans.
Programación y desarrollo Ver
📦
hft-quant-expert
78Crear estrategias de trading cuantitativo de cripto
por BarisSozen
Los equipos de derivados cripto necesitan señales, dimensionamiento y backtests rigurosos. Esta skill guía la investigación de trading DeFi con flujos de trabajo cuantitativos prácticos y controles de riesgo.
Datos y analítica Ver
📦
web3-testing
78Probar contratos inteligentes con Hardhat y Foundry
por wshobson
Los equipos de contratos inteligentes necesitan pruebas repetibles antes de desplegar cambios en el protocolo. Esta skill proporciona patrones prácticos de Hardhat y Foundry para pruebas unitarias, forks, fuzzing, comprobaciones de gas, cobertura y verificación.
Seguridad y cumplimiento Ver
📦
solidity-security
78Auditar Contratos Solidity de Forma Segura
por sickn33
Los contratos inteligentes fallan cuando se pasan por alto vulnerabilidades comunes antes del despliegue. Esta skill guía a Claude, Codex y Claude Code en revisiones de seguridad enfocadas para Solidity.
Seguridad y cumplimiento Ver
📦
liquidity-depth-analyzer
78Analizar la profundidad de liquidez DEX
por BarisSozen
Los swaps DEX pueden fallar cuando la profundidad de liquidez, el slippage o el impacto en el precio no están claros. Esta skill guía comprobaciones estructuradas de la profundidad del pool, la calidad de la ruta y el dimensionamiento de la operación.
Datos y analítica Ver