Skills okx-dapp-discovery

📦

okx-dapp-discovery

Name: okx-dapp-discovery
Author: internet-court

v4.2.1 Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Route DeFi DApp Requests to OKX Plugins

Choosing the right DeFi plugin is hard when requests mention tokens, protocols, or Chinese aliases. This skill maps the request to a supported OKX plugin or asks a focused clarification.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "okx-dapp-discovery" from https://skillstore.io/skills/internet-court-okx-dapp-discovery.md and its manifest at https://skillstore.io/api/skills/internet-court-okx-dapp-discovery/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/internet-court-okx-dapp-discovery.md Signed manifest GET /api/skills/internet-court-okx-dapp-discovery/manifest Signed lockfile GET /api/skills/internet-court-okx-dapp-discovery/lockfile

Test it

Using "okx-dapp-discovery". Stake ETH on Lido.

Expected outcome:

The skill routes the request to the Lido plugin, loads it when available, and continues the staking request after consent checks.

Using "okx-dapp-discovery". Aave vs Compound for stablecoins.

Expected outcome:

The skill asks whether to set up Aave, set up Compound, or discuss the tradeoffs before installing anything.

Using "okx-dapp-discovery". 有什么dapp

Expected outcome:

The skill shows supported DApps grouped by category, including prediction markets, lending, perpetuals, swaps, staking, and meme launchpads.

Security Audit

High Risk

v2 • 7/21/2026 Open versioned report

The skill contains many benign documentation references that triggered static rules. However, it silently installs third-party plugins globally and builds a shell command from a user-supplied DApp name before probing and installing packages. Those behaviors create supply-chain and command-injection exposure.

Files scanned

621

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:275-280

Untrusted DApp Name Reaches Shell Source

The catalog probe instructs substitution of the user-typed DApp name inside a double-quoted shell command. A quote or shell expansion in that value can alter the command before normalization.

The placeholder is explicitly described as user-typed and appears inside shell source. No escaping or allowlist is specified before the shell evaluates it.

High

SKILL.md:184-198 SKILL.md:286-297

Silent Third-Party Plugin Installation

The routing flow directs global installation of selected third-party plugins without confirmation. The later binary gate covers plugin pre-flight binaries but not the initial package installation.

The instructions explicitly say to install silently and use the global flag. The consent gate begins only after the plugin is installed and read.

Capability review items (15)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:167-182

Ruby/shell backtick execution

```bash

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:182-186

Ruby/shell backtick execution

```

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:188-193

Ruby/shell backtick execution

```bash

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:275-302

Ruby/shell backtick execution

```bash

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:302-304

Ruby/shell backtick execution

```

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:168

Shell command substitution

SKILLS_LIST=$(npx skills list 2>/dev/null)

This instruction runs npx skills list to inspect installed skills. It executes an external command, although its stated purpose is limited to an installed-status check.

Medium

SKILL.md:277

Shell command substitution

DAPP_LOWER=$(echo "<DApp name as user typed it>" | tr 'A-Z' 'a-z' | tr -d '.')

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:279-280

Shell command substitution

CATALOG=$(curl -fsSL --max-time 5 "https://api.github.com/repos/okx/plugin-store/contents/skills" 2>

The catalog probe executes curl and processes remote response data in a shell pipeline. It is a real external command and depends on an external service.

Medium

SKILL.md:284

Shell command substitution

MATCHES=$(echo "$CATALOG" | grep -E "^${DAPP_LOWER}(-|$)" || true)

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:285

Shell command substitution

COUNT=$(echo "$MATCHES" | grep -c . 2>/dev/null || echo 0)

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:288

Shell command substitution

1) TARGET_PLUGIN=$(echo "$MATCHES" | head -1)

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:167-182

Template literal with command substitution

```bash

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:275-302

Template literal with command substitution

```bash

This documentation instructs the agent to execute a shell command or command substitution. The behavior is operational, even where its stated purpose is skill discovery or catalog parsing.

Medium

SKILL.md:195

Hidden file access

Read file: $HOME/.claude/skills/<plugin-name>/SKILL.md

The instruction reads an installed plugin file from the user home directory after installation. This is a real local file access, though constrained to the skills directory.

Low

SKILL.md:279

Hardcoded URL

CATALOG=$(curl -fsSL --max-time 5 "https://api.github.com/repos/okx/plugin-store/contents/skills" 2>

The instruction makes an outbound request to the GitHub Contents API. It is a real network operation, although the endpoint is a stated public catalog.

Risk Factors

⚙️ External commands (50)

🌐 Network access (2)

SKILL.md:11 SKILL.md:279

📁 Filesystem access (14)

SKILL.md:202 SKILL.md:204 SKILL.md:209 SKILL.md:163 SKILL.md:195 SKILL.md:202 SKILL.md:204 SKILL.md:209 SKILL.md:168 SKILL.md:279 SKILL.md:280 SKILL.md:285 SKILL.md:296 SKILL.md:204

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/internet-court-okx-dapp-discovery/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/internet-court-okx-dapp-discovery/security.svg)](https://skillstore.io/skills/internet-court-okx-dapp-discovery?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/internet-court-okx-dapp-discovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-okx-dapp-discovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/internet-court-okx-dapp-discovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

internet-court. (2026). okx-dapp-discovery security audit report (audit version 2) [Author version 4.2.1]. Skillstore. https://skillstore.io/skills/internet-court-okx-dapp-discovery/audits/2

BibTeX citation

@techreport{internet-court-internet-court-okx-dapp-discovery-2026,
  author = {internet-court},
  title = {okx-dapp-discovery security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/internet-court-okx-dapp-discovery/audits/2},
  note = {Author version 4.2.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "okx-dapp-discovery security audit report (audit version 2)"
version: "4.2.1"
type: report
authors:
  - name: "internet-court"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/internet-court-okx-dapp-discovery/audits/2"
identifiers:
  - type: other
    value: "skillstore:internet-court-okx-dapp-discovery:audit:2"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

okx Recommended

okx-okx-dapp-discovery

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 1

Updated

2026-08-21

internet-court Current

internet-court-okx-dapp-discovery

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Route A Named DeFi Action

Send a protocol-specific action, such as staking on Lido or borrowing on Aave, to the matching OKX plugin.

Compare Supported Protocols

Handle requests that mention multiple DApps by asking whether to set up one plugin or discuss tradeoffs first.

Support Chinese DApp Requests

Resolve Chinese protocol aliases, action verbs, and examples to the correct routing outcome.

Try These Prompts

Show Supported DApps

Show me which DeFi DApps you can route and group them by category.

Route A Named Protocol

I want to deposit USDC into Aave V3. Route me to the right OKX plugin and continue with my request.

Clarify A Generic Yield Request

I want to earn yield with stablecoins. Ask one clarifying question if several supported DApps could fit.

Probe An Unsupported DApp

Check whether there is an OKX plugin for <DApp name>. If not, show closest supported alternatives and the OKX DeFi fallback.

Best Practices

Name the target DApp when you want direct routing to a specific protocol plugin.
Include the action and token pair when a protocol-native token could mean several workflows.
Review binary install prompts before approving downstream plugin pre-flight steps.

Avoid

Do not use generic terms like swap or yield alone when you need a specific DApp.
Do not ask it for full protocol documentation that belongs in the downstream plugin.
Do not approve binary installs without checking the plugin name, release URL, and install path.

Frequently Asked Questions

Which DApps can this skill route?

It routes 20 listed DeFi DApps, including Polymarket, Aave, Hyperliquid, PancakeSwap, Curve, Lido, and pump.fun.

Does it execute DeFi transactions by itself?

No. It routes the request to a downstream plugin, which owns its own commands, checks, and transaction flow.

Can it handle Chinese requests?

Yes. It includes Chinese aliases, action verbs, and routing examples for supported DApps and workflows.

What happens when several DApps match?

It follows its routing rules, asks one clarification question, or shows supported options when no safe single route exists.

What happens for an unsupported DApp?

It probes the plugin catalog for a matching plugin, then shows closest supported alternatives if no match exists.

Why can installation require consent?

Some downstream plugins may download binaries or scripts. The skill tells agents to request explicit approval before running those installers.

Developer Details

Author

internet-court

License

MIT

Author version

v4.2.1

Skillstore revision

Repository

https://github.com/internet-court/internet-court-skill/tree/main/vendored/okx/okx-dapp-discovery

Ref

3f6e026a3363e0954ede7bef0cfe88d4475de137

Maintenance freshness

7/21/2026

Usage

1 downloads · 0 views

File structure

📁 references/

📄 keyword-glossary.md

📄 protocol-keywords.md

📄 SKILL.md