OKX Competition Manager

• Analyzed: May 11, 2026, 4:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1e08e7d8c59b1374020eda5aee2be3a682be23900b854a64b127a196cb4a2821
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle describes an automated OKX trading system that requires sensitive API keys and includes a VBS script (guardian.vbs) for persistence and stealthy background execution (using WScript.Shell with hidden windows). While these capabilities are consistent with the stated goal of a 24/7 trading bot, they constitute high-risk behaviors. Additionally, the core JavaScript logic files (e.g., competition_manager_okx.js and evolve_agents.js) are missing from the bundle, making it impossible to verify if the API keys are handled securely or if the system performs unauthorized data exfiltration.