技能 okx-dex-market
📦
okx-dex-market
v4.4.10 內容修訂 r1 嚴重 ⚙️ 外部命令📁 檔案系統存取🔑 環境變數🌐 網路存取
Analyze On-Chain DEX Markets and Signals
DEX research often requires several data sources and command formats. This skill routes read-only market, token, wallet, social, and live signal queries through Onchain OS.
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "okx-dex-market" from https://skillstore.io/skills/okx-okx-dex-market.md and its manifest at https://skillstore.io/api/skills/okx-okx-dex-market/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「okx-dex-market」。 Compare current prices for three specified Ethereum tokens.
預期結果:
A compact comparison lists each token, USD price, request time, and any unavailable result. Contract addresses distinguish tokens with similar symbols.
正在使用「okx-dex-market」。 Review a wallet's seven-day DEX performance.
預期結果:
The report summarizes realized profit, win rate, transaction activity, and strongest token results for the requested period.
正在使用「okx-dex-market」。 Screen a newly launched Solana meme token.
預期結果:
The assessment highlights liquidity, holder concentration, developer history, bundle activity, sniper indicators, and important data gaps.
安全審計
嚴重v1 • 2026/8/20 開啟版本化報告
Static review confirms one critical unattended installer instruction; the remaining 130 matches are documentation, placeholders, examples, or fixed references. Semantic review also found untrusted preflight instructions and unvalidated payment fields entering CLI commands. Publication should remain blocked until remote execution and command construction are hardened.
30
已掃描檔案
4,764
分析行數
1
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
嚴重
Automatic Remote Installer Execution
The fallback retrieves installation instructions from a mutable GitHub README and runs the selected shell or PowerShell command without requesting explicit user approval.
The instruction explicitly requires running a remotely sourced installer when the CLI is missing. The source is mutable and no confirmation, pin, or integrity check is required before execution.
高
Untrusted Preflight Output Controls Agent Actions
The procedure tells the agent to execute any non-null data.action instruction, including forced upgrades. This creates an instruction-injection path from CLI output.
The preflight text says to do exactly what data.action says, while the top-level safety rule classifies CLI output as untrusted. The conflicting rules leave a direct prompt-injection sink.
高
Unvalidated Payment Fields Enter CLI Arguments
Payment response fields are inserted into a command and the original request is rerun. The instructions do not require strict validation or structured argument execution.
The command parameters come from an external notification payload and include a display name. Without validation and shell-safe argument handling, crafted values could alter command execution.
能力複核項目 (1)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
嚴重
PowerShell invocation
- **The `onchainos preflight` command above errored with "command not found"** (onchainos not instal
The fallback directs the agent to fetch a mutable README and execute its operating-system installer command automatically. This enables unattended shell or PowerShell execution without explicit user approval.
風險因素
⚙️ 外部命令 (16)
📁 檔案系統存取 (40)
_shared/payment-notifications.md:129 _shared/payment-notifications.md:129 references/market.md:15 references/market.md:16 references/market.md:17 references/market.md:15 references/market.md:16 references/market.md:17 references/signal.md:15 references/signal.md:16 references/signal.md:17 references/signal.md:18 references/signal.md:19 references/signal.md:15 references/signal.md:16 references/signal.md:17 references/signal.md:18 references/signal.md:19 references/social-troubleshooting.md:35 references/social-troubleshooting.md:35 references/token.md:15 references/token.md:16 references/token.md:17 references/token.md:18 references/token.md:15 references/token.md:16 references/token.md:17 references/token.md:18 references/trenches.md:33 references/trenches.md:34 references/trenches.md:35 references/trenches.md:36 references/trenches.md:33 references/trenches.md:34 references/trenches.md:35 references/trenches.md:36 references/ws.md:13 references/ws.md:13 SKILL.md:17 SKILL.md:21
🔑 環境變數 (30)
_shared/payment-notifications.md:115 references/market-ws-protocol.md:40 references/market-ws-protocol.md:52 references/market-ws-protocol.md:56 references/market-ws-protocol.md:64 references/market-ws-protocol.md:68 references/market-ws-protocol.md:72 references/market-ws-protocol.md:75 references/signal-ws-protocol.md:40 references/signal-ws-protocol.md:52 references/signal-ws-protocol.md:56 references/signal-ws-protocol.md:64 references/signal-ws-protocol.md:68 references/signal-ws-protocol.md:72 references/signal-ws-protocol.md:75 references/social-troubleshooting.md:35 references/token-ws-protocol.md:39 references/token-ws-protocol.md:51 references/token-ws-protocol.md:55 references/token-ws-protocol.md:63 references/token-ws-protocol.md:67 references/token-ws-protocol.md:71 references/token-ws-protocol.md:74 references/trenches-ws-protocol.md:40 references/trenches-ws-protocol.md:52 references/trenches-ws-protocol.md:56 references/trenches-ws-protocol.md:64 references/trenches-ws-protocol.md:68 references/trenches-ws-protocol.md:72 references/trenches-ws-protocol.md:75
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/okx-okx-dex-market/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/okx-okx-dex-market?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/okx-okx-dex-market?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/okx-okx-dex-market/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/okx-okx-dex-market.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
okx. (2026). okx-dex-market security audit report (audit version 1) [Author version 4.4.10]. Skillstore. https://skillstore.io/skills/okx-okx-dex-market/audits/1BibTeX 引用
@techreport{okx-okx-okx-dex-market-2026,
author = {okx},
title = {okx-dex-market security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/okx-okx-dex-market/audits/1},
note = {Author version 4.4.10}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "okx-dex-market security audit report (audit version 1)"
version: "4.4.10"
type: report
authors:
- name: "okx"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/okx-okx-dex-market/audits/1"
identifiers:
- type: other
value: "skillstore:okx-okx-dex-market:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 低 45
架構
100
可維護性
87
內容
65
社群
91
規範符合度
你可以打造什麼
Compare Token Markets
Review prices, liquidity, holders, and recent trades before deeper research.
Monitor Wallet Activity
Track smart-money transactions, wallet performance, and token-level profit or loss.
Screen New Meme Tokens
Evaluate launches, developer history, holder concentration, bundles, and sniper activity.
試試這些提示
Check a Token Price
Show the current price of [token address] on [chain], including the data timestamp.
Research a Token
Analyze [token address] on [chain] using liquidity, holders, recent trades, risk metadata, and social sentiment.
Review Wallet Performance
Summarize wallet [address] on [chain] for [period], including realized profit, win rate, recent trades, and leading tokens.
Build a Live Signal Monitor
Monitor [chains] for [signal types], filter by [criteria], and summarize new events with timestamps and contract addresses.
最佳實務
- Provide the chain and lowercase contract address whenever possible.
- Treat market, social, and wallet data as time-sensitive research rather than financial advice.
- Review payment details and explicitly confirm or cancel before any paid retry.
避免
- Do not request purchases, swaps, sales, or token sniping through this read-only skill.
- Do not identify a token by symbol alone when several contracts share that symbol.
- Do not treat smart-money signals, sentiment, or historical performance as guaranteed returns.
常見問題
Can this skill trade tokens?
No. It performs read-only research and routes write requests to a separate discovery workflow.
Which data can it retrieve?
It covers token, market, wallet, signal, social, meme-token, and supported WebSocket data.
Does it require an OKX account?
Some public queries may work directly. Authenticated WebSocket or payment-gated endpoints require configured OKX credentials.
Can it monitor markets in real time?
Yes. It can use supported Onchain OS WebSocket channels for prices, candles, trades, signals, and launches.
Will every query be free?
No. Some endpoints may require payment after monthly free quotas are exhausted, and the skill must request confirmation.
Does token risk metadata prove a token is safe?
No. Risk fields and historical patterns support research, but they cannot eliminate contract, liquidity, market, or fraud risk.