Skills okx-agent-payments-protocol
๐Ÿ“ฆ

okx-agent-payments-protocol

v4.2.1 Content revision r1 High Risk ๐Ÿ“ Filesystem access๐Ÿ”‘ Env variablesโšก Contains scriptsโš™๏ธ External commands๐ŸŒ Network access

Handle OKX Agent Payment Flows

Paid agent endpoints often require careful signing, confirmation, and replay steps. This skill guides Claude, Codex, and Claude Code through OKX Agent Payments Protocol flows.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "okx-agent-payments-protocol" from https://skillstore.io/skills/internet-court-okx-agent-payments-protocol.md and its manifest at https://skillstore.io/api/skills/internet-court-okx-agent-payments-protocol/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "okx-agent-payments-protocol". I need to access a paid weather endpoint that returned HTTP 402.

Expected outcome:

  • Shows the required network, token, amount, recipient, and request parameters.
  • Asks for explicit confirmation before checking wallet status or signing.
  • After payment, reports the settlement result and suggests a balance check.

Using "okx-agent-payments-protocol". Create a payment link for 0.01 USDT to my seller wallet.

Expected outcome:

  • Confirms the payment link was created.
  • Displays the payment identifier, amount, recipient, and shareable link when available.
  • Suggests checking status after the buyer pays.

Using "okx-agent-payments-protocol". Close my active payment channel after the final request.

Expected outcome:

  • Uses the saved channel state to close the channel.
  • Shows the charged amount, prepaid balance, refund amount, and on-chain transaction reference.

Security Audit

High Risk
v2 โ€ข 7/21/2026 Open versioned report

Most static matches are false positives caused by Markdown code formatting, relative documentation links, protocol literals, and security-oriented guidance. Four findings are confirmed because the local-key fallback reads EVM_PRIVATE_KEY from the environment or ~/.onchainos/.env to authorize payment signing. No prompt-injection, credential-exfiltration, or covert network-intent evidence was found in the reviewed material.

9
Files scanned
1,248
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (1)

High
Environment file access
Reads `EVM_PRIVATE_KEY` (env var or `~/.onchainos/.env`), derives the payer, generates the nonce, co
The workflow directs the local-key fallback to read EVM_PRIVATE_KEY from the environment or a local environment file. This creates credential-exposure and signing risk.
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Hidden file in home directory
Reads `EVM_PRIVATE_KEY` (env var or `~/.onchainos/.env`), derives the payer, generates the nonce, co
The documented local-key fallback reads a private key from ~/.onchainos/.env. Accessing a wallet credential on the host has material compromise impact if the CLI or environment is unsafe.
High
Generic API/secret keys
Reads `EVM_PRIVATE_KEY` (env var or `~/.onchainos/.env`), derives the payer, generates the nonce, co
The documented local-key fallback reads EVM_PRIVATE_KEY to sign payments. A private key is a high-value credential and its use can authorize financial transactions.
Medium
Hidden file access
Reads `EVM_PRIVATE_KEY` (env var or `~/.onchainos/.env`), derives the payer, generates the nonce, co
The local-key fallback explicitly accesses ~/.onchainos/.env to obtain a wallet credential. This is sensitive host-file access with high impact if exposed.
Audited by: claude View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/internet-court-okx-agent-payments-protocol/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/internet-court-okx-agent-payments-protocol/security.svg)](https://skillstore.io/skills/internet-court-okx-agent-payments-protocol?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/internet-court-okx-agent-payments-protocol?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-okx-agent-payments-protocol/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/internet-court-okx-agent-payments-protocol.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

internet-court. (2026). okx-agent-payments-protocol security audit report (audit version 2) [Author version 4.2.1]. Skillstore. https://skillstore.io/skills/internet-court-okx-agent-payments-protocol/audits/2

BibTeX citation

@techreport{internet-court-internet-court-okx-agent-payments-protocol-2026, author = {internet-court}, title = {okx-agent-payments-protocol security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/internet-court-okx-agent-payments-protocol/audits/2}, note = {Author version 4.2.1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "okx-agent-payments-protocol security audit report (audit version 2)" version: "4.2.1" type: report authors: - name: "internet-court" date-released: "2026-07-21" url: "https://skillstore.io/skills/internet-court-okx-agent-payments-protocol/audits/2" identifiers: - type: other value: "skillstore:internet-court-okx-agent-payments-protocol:audit:2" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Stronger evidence confidence
internet-court Recommended Current

internet-court-okx-agent-payments-protocol

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-08-21

okx-okx-agent-payments-protocol

Skillstore Score 38
Evidence Confidence Low
Skillstore usage 1
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
100
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Access paid agent endpoints

Handle HTTP 402 responses, show payment details, collect confirmation, sign, and replay the protected request.

Manage payment channels

Open a prepaid session, issue vouchers, top up balance, and close the channel with clear state tracking.

Operate a2a payment links

Create seller links, pay buyer links, poll status, and present terminal payment states in plain language.

Try These Prompts

Pay a protected endpoint
Call <endpoint URL>. If it returns a payment requirement, show the charge details and wait for my confirmation before payment.
Create a payment link
Create an a2a payment link for <amount> <symbol> to <recipient address> with description <description>.
Continue a channel session
Use channel <channel_id> to make another request to <business URL>. Track the cumulative amount and show the channel state.
Compare payment schemes
For this HTTP 402 response, compare the available OKX Agent Payments Protocol options, recommend one, and wait for confirmation.

Best Practices

  • Confirm each payment with amount, token, network, recipient, and request parameters before signing.
  • Prefer TEE wallet signing over local private key fallback when possible.
  • Keep channel identifiers, escrow address, chain ID, deposit, cumulative amount, and signature in conversation state.

Avoid

  • Do not sign a payment before showing the required confirmation card.
  • Do not reuse stale signatures or expired payment challenges.
  • Do not expose internal protocol routing when a plain payment result is enough.

Frequently Asked Questions

What payment flows does this skill cover?
It covers x402 accepts-based payments, subscription offers, one-shot charges, session channels, and a2a payment links.
Does this skill move funds by itself?
It guides commands that sign payment authorizations. The user should confirm payment details before signing.
Does it require an OKX wallet session?
Most flows require a live wallet session. Some accepts-based flows offer a local-key fallback.
Can it use a private key?
Only the accepts-based local fallback uses EVM_PRIVATE_KEY. The safer default is TEE wallet signing.
How are recurring payments handled?
Subscription flows sign bounded Permit2 and subscription terms, then use access proofs for protected resources.
What should I verify for a2a links?
Verify the seller, amount, token, and recipient out of band before paying an a2a payment identifier.

Developer Details

License

MIT

Author version

v4.2.1

Skillstore revision

r1

Ref

3f6e026a3363e0954ede7bef0cfe88d4475de137

Maintenance freshness

7/21/2026

Usage

1 downloads ยท 0 views

File structure

๐Ÿ“ _shared/

๐Ÿ“„ amount-display.md

๐Ÿ“„ preflight.md

๐Ÿ“ references/

๐Ÿ“„ a2a_charge.md

๐Ÿ“„ accepts-schemes.md

๐Ÿ“„ charge.md

๐Ÿ“„ multi-scheme.md

๐Ÿ“„ session.md

๐Ÿ“„ subscription.md

๐Ÿ“„ SKILL.md

More from internet-court

View all
View all