스킬 okx-agentic-wallet
📦

okx-agentic-wallet

v4.6.6 콘텐츠 리비전 r1 높은 위험 📁 파일 시스템 접근⚙️ 외부 명령어🌐 네트워크 접근

Manage OKX Wallets and On-Chain Transactions

Managing wallets across chains requires careful address checks, fee review, and transaction tracking. This skill guides Onchain OS CLI workflows for holdings, transfers, swaps, bridges, and security checks.

지원: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 나쁨

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청
Review the Skillstore skill "okx-agentic-wallet" from https://skillstore.io/skills/okx-okx-agentic-wallet.md and its manifest at https://skillstore.io/api/skills/okx-okx-agentic-wallet/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

테스트해 보기

"okx-agentic-wallet" 사용 중입니다. Show my holdings without changing anything.

예상 결과:

  • Illustrative result: Active account: Primary.
  • Ethereum holdings: 0.20 ETH and 150 USDC.
  • No transactions were submitted.

"okx-agentic-wallet" 사용 중입니다. Compare bridge options but do not send funds.

예상 결과:

  • Illustrative comparison: Route A estimates 99.50 USDC received, with a 0.50 USDC bridge fee.
  • Route B estimates 99.20 USDC received, with a 0.80 USDC bridge fee.
  • Source-chain gas is additional. Quotes can change. No bridge transaction was submitted.

"okx-agentic-wallet" 사용 중입니다. The token security scan failed. What happens next?

예상 결과:

  • Token verification is unavailable. No safety conclusion can be drawn.
  • Pause the trade and retry the scan before authorizing execution.

보안 감사

높은 위험
v1 • 2026. 10. 28. 버전별 보고서 열기

All 116 static matches are false positives for the reported patterns: documentation formatting, wallet identifiers, protective secret references, and legitimate paths or URLs. Semantic review found failed-scan continuation, conflicting swap-block rules, returned-command execution without specified validation, and an unpinned preflight installer. No evidence found of credential exfiltration or audit-directed prompt injection; external CLI and backend implementations were not verified.

32
스캔된 파일
3,264
분석된 줄 수
0
검토 항목
0
오탐 무시됨

확인된 보안 우려 사항 (4)

높음
Swap Security Scans Fail Open
Swap token-scan failures automatically continue with a warning, and unsupported scan chains do not block. Trading can proceed without completed token-risk verification.
The swap exception explicitly removes the general retry-or-consent pause after scan failure. This creates a verification gap, not evidence of malicious intent.
높음
Conflicting Rules Permit Blocked Swap Overrides
The swap flow says blocked routes must not broadcast, but later rules say BLOCK requires an explicit override, including blacklisted addresses. This weakens mandatory stops.
Directly conflicting instructions distinguish neither overridable warnings nor immutable blocks. An agent can interpret later override guidance as authorization to trade blocked assets.
높음
Returned Command Strings Cross the Execution Boundary
The skill follows returned next commands and uses returned bridge-status commands verbatim. It specifies no command allowlist or argument validation before execution.
The execution instructions directly trust returned command strings despite declaring CLI output untrusted. Exploitation depends on influencing those fields; no injected payload was found.
중간
Mandatory Preflight Runs an Unpinned Installer
The required preflight delegates to an automatically approved npx installer without a package version. Registry-delivered code runs before wallet operations without separate installation consent.
The cited line mandates the linked preflight, which runs npx -y @okxweb3/onchainos-installer. Its skill-version argument does not pin the installer package.
감사자: codex
이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기
보안 평가

보고서 링크 복사

https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/okx-okx-agentic-wallet/security.svg)](https://skillstore.io/skills/okx-okx-agentic-wallet?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/okx-okx-agentic-wallet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-agentic-wallet/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/okx-okx-agentic-wallet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
학술 인용 (APA · BibTeX · CFF)

APA 인용

okx. (2026). okx-agentic-wallet security audit report (audit version 1) [Author version 4.6.6]. Skillstore. https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1

BibTeX 인용

@techreport{okx-okx-okx-agentic-wallet-2026, author = {okx}, title = {okx-agentic-wallet security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1}, note = {Author version 4.6.6} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "okx-agentic-wallet security audit report (audit version 1)" version: "4.6.6" type: report authors: - name: "okx" date-released: "2026-10-28" url: "https://skillstore.io/skills/okx-okx-agentic-wallet/audits/1" identifiers: - type: other value: "skillstore:okx-okx-agentic-wallet:audit:1" description: "Skillstore immutable audit report identifier"

변형 비교

설치 가능한 변형 2개

각 작성자의 스킬은 별도의 설치 항목으로 유지됩니다. 추천 변형은 Skillstore 근거로 순위가 정해집니다.

이 변형이 1위인 이유

Skillstore 사용량이 더 높음

internet-court-okx-agentic-wallet

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 10
업데이트됨

2026-09-09

okx 현재

okx-okx-agentic-wallet

Skillstore 점수 38
증거 신뢰도 중간
Skillstore 사용량 알 수 없음
업데이트됨

2026-10-28

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간
45
아키텍처
100
유지보수성
87
콘텐츠
65
커뮤니티
100
사양 준수

만들 수 있는 것

Review Personal Wallet Holdings

Inspect account balances, receive addresses, and transaction history without requesting transfers or disclosing credentials.

Compare Swap and Bridge Routes

Review token identities, expected proceeds, fees, and route risks before deciding whether to authorize a transaction.

Inspect Transaction and Approval Risks

Check contract interactions, inspect token allowances, and prepare revocations with simulation and explicit confirmation.

이 프롬프트를 사용해 보세요

Check Wallet Balances
Show my current wallet account and token balances. Use read-only queries. Do not transfer funds or reveal credentials.
Review a Token Transfer
Prepare a transfer of [amount] [token] on [chain] to [full recipient address]. Show fees and checks. Wait for confirmation before sending.
Compare Bridge Routes
Compare routes for [amount] [token] from [source chain] to [destination chain]. Show fees and minimum receipts. Do not execute.
Audit Approvals Before Revocation
Inspect token approvals for [public address] on [chain]. Explain flagged spenders and prepare bounded revocations. Stop if scans fail. Confirm each write separately.

모범 사례

  • Use a limited-balance wallet and configure spending limits and destination allowlists through the official portal before authorizing transactions.
  • Verify full addresses, chain, token identity, fees, and slippage against fresh CLI output before confirming each write.
  • Pause when scans fail or return BLOCK. Validate returned commands against documented syntax instead of executing arbitrary response strings.

피하기

  • Sharing seed phrases, private keys, API credentials, or session tokens in the conversation.
  • Treating transaction broadcast, request acceptance, or a funding notification as final settlement or renewed transfer authorization.
  • Using force flags on the first attempt, bypassing blocked verdicts, or assuming a failed scan means an asset is safe.

자주 묻는 질문

Which AI tools can use this skill?
The report lists Claude, Codex, and Claude Code. Actual execution also requires compatible command access and the external Onchain OS CLI.
Does every operation require wallet login?
No. Public-address portfolio queries and security checks can work without login. Wallet writes and limit orders require an authenticated account.
Can the agent export my seed phrase?
No. Export is a user action in the official wallet application or extension. Never share the resulting phrase with the agent.
Will it ask before sending funds?
The main rules require explicit confirmation before writes. Automated modes require prior opt-in. Conflicting swap-block instructions remain an audit concern.
Are swaps and limit orders available on every chain?
No. Support varies by command and backend. Limit orders list Ethereum, BSC, X Layer, Solana, Base, and Arbitrum.
Does a completed security scan guarantee safety?
No. Results cover only the checks performed. Failed scans provide no verification, and some documented swap paths continue with warnings.

okx의 다른 스킬

전체 보기
전체 보기