技能 okx-defi
📦

okx-defi

v4.6.6 內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Explore DeFi Yields and Manage Positions

Comparing DeFi yields and tracking positions across chains requires consistent product, token, and wallet data. This skill guides OKX-aggregated discovery, portfolio inspection, and transaction preparation through the onchainos CLI.

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理,其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "okx-defi" from https://skillstore.io/skills/okx-okx-defi.md and its manifest at https://skillstore.io/api/skills/okx-okx-defi/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫,並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時,請使用這些連結。

測試它

正在使用「okx-defi」。 Show the sample USDC product information as a readable comparison.

預期結果:

  • Illustrative reference data, not a live quote: Aave V3 on Ethereum; product identifier 9502; USDC.
  • APY: 1.89%. TVL: $3.52 billion.
  • No transaction was prepared or signed.

正在使用「okx-defi」。 Explain the sample lending position and its next review steps.

預期結果:

  • Illustrative reference position: Supply; USDT; amount 1.002285; value $1.0025.
  • Investment identifier: 127. Aggregate product identifier: 71931. Pending rewards: 0.000080 AVAX.
  • Refresh position details before preparing a withdrawal or reward claim. No transaction has been signed.

安全審計

高風險
v1 • 2026/10/28 開啟版本化報告

All 84 static matches are benign Markdown, DeFi parameters, documentation links, or explicit private-key noncustody language. Two semantic risks remain: automatic unpinned installer execution and signing opaque transaction responses without documented semantic verification. User confirmation and sequential execution mitigate some risk; no evidence found of credential exfiltration or audit-targeted prompt injection.

8
已掃描檔案
1,347
分析行數
0
複核項目
0
已忽略的誤報

已確認的安全問題 (2)

高
Opaque Transaction Signing Without Documented Semantic Verification
The wallet flow passes returned targets, payloads, and values directly into signing and forbids inspecting rejected payloads. User confirmation is required, but no documented decoding or simulation verifies approval scope or intended asset movements before signing.
Direct wallet signing and the inspection prohibition are explicit. External wallet safeguards may reduce exposure, but their implementation is outside these files.
中
Automatic Unpinned Installer Execution
The mandatory preflight delegates to a bundled fallback that runs npx -y @okxweb3/onchainos-installer without a package version pin. This permits mutable registry code to execute before ordinary queries, without a separate installation-consent step.
The entry point requires preflight each thread, and the reviewed fallback specifies the unpinned npx command. No evidence found of malicious package contents.
審計單位: codex
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據,不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/okx-okx-defi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/okx-okx-defi/security.svg)](https://skillstore.io/skills/okx-okx-defi?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/okx-okx-defi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-defi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/okx-okx-defi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

okx. (2026). okx-defi security audit report (audit version 1) [Author version 4.6.6]. Skillstore. https://skillstore.io/skills/okx-okx-defi/audits/1

BibTeX 引用

@techreport{okx-okx-okx-defi-2026, author = {okx}, title = {okx-defi security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/okx-okx-defi/audits/1}, note = {Author version 4.6.6} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "okx-defi security audit report (audit version 1)" version: "4.6.6" type: report authors: - name: "okx" date-released: "2026-10-28" url: "https://skillstore.io/skills/okx-okx-defi/audits/1" identifiers: - type: other value: "skillstore:okx-okx-defi:audit:1" description: "Skillstore immutable audit report identifier"

比較變體

2 個可安裝變體

每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。

為何此變體排名第一

Skillstore 使用量較高

internet-court-okx-defi

Skillstore 評分 38
證據置信度 中
Skillstore 使用量 9
已更新

2026-09-09

okx 目前

okx-okx-defi

Skillstore 評分 38
證據置信度 中
Skillstore 使用量 未知
已更新

2026-10-28

Skillstore 評分

評分依據 證據置信度: 中
45
架構
100
可維護性
87
內容
65
社群
91
規範符合度

你可以打造什麼

Compare Cross-Protocol Yield Opportunities

Compare supported USDC products by chain, APY, TVL, and historical trends before selecting any investment.

Review Treasury Exposure

Inspect wallet positions across compatible chains, identify protocol concentrations, and review rewards or lending health warnings.

Prepare Liquidity Position Changes

Review V3 depth and tick ranges, refresh position details, and prepare a confirmed withdrawal or reward claim.

試試這些提示

Find Yield Products
Find supported USDC yield products on Ethereum. Show product identifiers, APY, and TVL. Do not prepare or sign transactions.
Inspect My Positions
Show DeFi positions for [EVM address] on Ethereum and Base. Include protocol identifiers, pending rewards, and any available lending health warnings.
Compare Product History
Compare [investment ID A] and [investment ID B] using monthly APY and TVL history. Identify missing data and report observations without guaranteeing returns.
Prepare a V3 Withdrawal
For [address], inspect V3 position [token ID] on [chain]. Refresh position details and prepare a full withdrawal only after confirming parameters. Do not sign.

最佳實務

  • Confirm the wallet address, chain, product identifier, token precision, and amount before preparing transactions.
  • Refresh position details before each withdrawal or claim, and check available balances before deposits.
  • Review installer provenance and transaction effects before consent; execute approved steps sequentially and stop on failure.

避免

  • Selecting products only by advertised APY while ignoring liquidity, contract risk, or lending health.
  • Reusing stale positions, expired calldata, or amounts copied without checking token precision.
  • Signing opaque payloads without verifying recipients, approval limits, chain, and expected asset movements.

常見問題

Which AI tools can use this skill?
The report lists Claude, Codex, and Claude Code. The environment also needs the external onchainos CLI.
Does it cover every DeFi protocol?
No. Coverage depends on OKX aggregation and current supported chains and platforms. Named third-party DApp research routes to a companion skill.
Can I inspect positions without logging into a wallet?
You can provide a public wallet address for position queries. The address must match the selected chain family.
Does preparing a transaction move funds?
No. DeFi preparation returns unsigned calldata. A separate signing and broadcast workflow can move funds after user confirmation.
What should I review before signing?
Verify the chain, signing address, contract target, approval spender, amounts, and expected asset movements. Use decoding or simulation without changing payload bytes.
Are the displayed yields guaranteed?
No. APY and TVL can change, and DeFi positions carry financial and contract risks. The skill requires warnings for APY above 50%.

開發者詳細資訊

作者

okx

授權

MIT

作者版本

v4.6.6

Skillstore 修訂

r1

引用

71b1d31f7a159583057137e2a844a17a1c060b43

維護新鮮度

2026/10/28

使用量

0 次下載 · 0 次瀏覽

okx 的更多技能

查看全部
查看全部