okx-cex-market
PassAudited by ClawScan on May 8, 2026.
Overview
This appears to be a coherent read-only OKX market-data skill, with the main caution being that it relies on an external npm CLI package that is not included for review.
Before installing, verify the external `@okx_ai/okx-trade-cli` package and consider pinning the version. The documented skill is for public, read-only market data; do not rely on it for account balances, trading, or bot actions unless you intentionally invoke the separate relevant skills and review those actions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the CLI gives locally executed code from npm the ability to run on the user's machine, even though this skill's documented use is read-only market data.
The skill depends on installing and running an external npm CLI package whose code is not included in the supplied artifacts; this is aligned with the market-data CLI purpose, but users should verify package provenance and version before global installation.
npm install -g @okx_ai/okx-trade-cli
Verify that the npm package is the expected OKX package, prefer a pinned version matching the skill version, and install it only from a trusted registry/source.
The agent may make public OKX market-data queries on the user's behalf without asking each time, but the artifacts do not show order placement or account changes.
The skill authorizes the agent to invoke OKX market commands without additional confirmation; the documented commands are read-only and public, so this is proportionate but still worth users noticing.
No confirmation needed before running any market command.
Use this for read-only market lookups; request confirmation for broad scans or any workflow that transitions into account, bot, or trading actions.