okx_symbol_prices

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the dependency is installed later, the exact package version may vary by environment.

Why it was flagged

The skill may rely on installing an external Python package with only a minimum version specified. This is common and purpose-aligned for HTTP API access, but not as reproducible as a pinned dependency.

Skill content
requests>=2.31.0
Recommendation

Install dependencies from a trusted package source, and pin versions if reproducibility or stricter supply-chain control matters.

What this means

OKX can observe the symbols you request through this skill.

Why it was flagged

The script makes HTTPS requests to OKX for the user-supplied ticker symbols. This is disclosed and central to the skill, and the artifacts do not show credentials or local files being sent.

Skill content
OKX_API_BASE = "https://www.okx.com"
Recommendation

Use the skill only when you are comfortable sending the requested ticker symbols to OKX.