okx_symbol_prices

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 7:15 AM UTC
• Version: 1.0.0

Overview

This skill is a small, disclosed OKX price lookup tool with limited network behavior and no evidence of hidden persistence, credential access, or destructive actions.

Reasonable to install if you want OKX spot price lookups. Be aware it makes live requests to www.okx.com and the package maintainer should pin the requests dependency for cleaner supply-chain review.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence

Finding

The skill invokes a Python script that performs outbound network access to OKX, but the skill manifest does not declare any explicit tool scope such as permissions or allowed-tools. This creates a transparency and policy-enforcement gap: an agent may run a network-capable skill without clear authorization boundaries, making review, sandboxing, and least-privilege enforcement harder.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 91% confidence

Finding

The dependency is specified as requests>=2.31.0, which allows future unreviewed versions to be installed and prevents reproducible builds. In a security-sensitive agent skill, this increases supply-chain risk because behavior and vulnerability exposure can change over time without any code change in the skill itself.

Content

Scanner excerpt · requirements.txt (reported line 1)May include surrounding context.

text

requests>=2.31.0

Unverifiable Dependency: requests has 16 known advisory(ies) (CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +13 more), but the manifest does not pin a version, so it is unknown whether the installed release is affected

Low

• Category: Supply Chain
• Confidence: 95% confidence

Finding

Because requests is not pinned, it is impossible to verify from this manifest whether the installed version avoids known vulnerable releases. This is especially relevant for a network-facing skill that fetches external data, since HTTP client flaws can affect credential handling, TLS verification, redirects, or request routing depending on the deployed version.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.