Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed OKX Earn monitoring skill, but it needs review because it creates persistent scheduled jobs and includes account-changing purchase, transfer, and redeem guidance.
Install only if you want a persistent OKX Earn monitor. Review the scheduler it creates, the ~/.okx/earn-hunter files, and any Telegram or Lark destination. Do not let the agent run subscribe, transfer, or redeem commands unless you separately confirm the exact asset, amount, term, and account impact; prefer the dedicated OKX execution skill or the OKX app for purchases.
TOKEN=$(printenv "${config.telegram.bot_token_env}")
CHAT_ID=$(printenv "${config.telegram.chat_id_env}")
curl -s "https://api.telegram.org/bot${TOKEN}/sendMessage" \
-d "chat_id=${CHAT_ID}" \
-d "text=${message}" \
-d "parse_mode=HTML"TOKEN=$(printenv "${config.telegram.bot_token_env}")
CHAT_ID=$(printenv "${config.telegram.chat_id_env}")
curl -s "https://api.telegram.org/bot${TOKEN}/sendMessage" \
-d "chat_id=${CHAT_ID}" \
-d "text=${message}" \
-d "parse_mode=HTML"# 期望返回 ok: true + bot info
# Step 2: 验证 chat_id 有效性
curl -s "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/getChat?chat_id=${TELEGRAM_CHAT_ID}"
# 期望返回 ok: true + chat info
# Step 3: 重发测试消息# 期望返回 ok: true + chat info
# Step 3: 重发测试消息
curl -s "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage" \
-d "chat_id=${TELEGRAM_CHAT_ID}" \
-d "text=🔧 Earn Hunter 排障测试消息" \
-d "parse_mode=HTML"fi
local resp
resp=$(curl -s -X POST "$webhook" -H "Content-Type: application/json" -d "$payload" 2>/dev/null)
if echo "$resp" | jq -e '.StatusCode == 0 or .code == 0' >/dev/null 2>&1; then
log_notify "LARK" "OK" "$detail sent"
return 0- Use `action: "list"` to find the job id. **OS-crontab platforms (`cron`):** - **Pause:** `crontab -l | grep -v 'earn-hunter' | crontab -` - **Resume:** Re-add the crontab entry (same as Activation Step 5). **macOS LaunchAgent (`launchagent`):**
- No API key + `okx auth status --json` → `"status":"logged_in"` → **OAuth mode**. No `--profile` flag needed.
- Neither → **stop**. Load `okx-cex-auth` skill and follow login steps.
5. Init config and state:
- If `~/.okx/earn-hunter/` directory does not exist → `mkdir -p ~/.okx/earn-hunter`
- If `~/.okx/earn-hunter/config.json` does not exist → copy `{baseDir}/config/default.json` to it
- If `~/.okx/earn-hunter/state.json` does not exist → write `{"flash":{},"fixed":{},"flexible":{},"consecutive_failures":0,"last_error":""}`
- If `~/.okx/earn-hunter/platform.json` does not exist → run [Platform Detection](#platform-detection-active-probe--user-confirmation)### Step 1 — Platform Detection & Confirmation See [Platform Detection](#platform-detection-active-probe--user-confirmation). Probe environment → ask user to confirm → write `platform.json`. ### Step 2 — Detect Notification Channel & Confirm
LOG_FILE="$HOME/.okx/earn-hunter/cron.log" INTERVAL=3600 # derive from scheduler.interval: "1h"→3600, "30m"→1800, "10m"→600 cat > ~/Library/LaunchAgents/com.okx.earn-hunter.plist << PLIST <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">
LOG_FILE="$HOME/.okx/earn-hunter/cron.log" INTERVAL=3600 # derive from scheduler.interval: "1h"→3600, "30m"→1800, "10m"→600 cat > ~/Library/LaunchAgents/com.okx.earn-hunter.plist << PLIST <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
PLIST
launchctl load ~/Library/LaunchAgents/com.okx.earn-hunter.plist### Lark Webhook Setup 1. "Create a custom bot in a Lark group → get the webhook URL" 2. "Save it to config:" Read `~/.okx/earn-hunter/platform.json` → set `.notify.lark_webhook` to the webhook URL → write back.
When user says "卸载" / "uninstall": 1. Stop the scheduler (same as Pause). For LaunchAgent, also remove the plist: `launchctl unload ~/Library/LaunchAgents/com.okx.earn-hunter.plist && rm -f ~/Library/LaunchAgents/com.okx.earn-hunter.plist` 2. Ask: "是否保留配置和历史数据？" - Yes → only remove scheduler - No → also remove `~/.okx/earn-hunter/` directory
When user says "卸载" / "uninstall": 1. Stop the scheduler (same as Pause). For LaunchAgent, also remove the plist: `launchctl unload ~/Library/LaunchAgents/com.okx.earn-hunter.plist && rm -f ~/Library/LaunchAgents/com.okx.earn-hunter.plist` 2. Ask: "是否保留配置和历史数据？" - Yes → only remove scheduler - No → also remove `~/.okx/earn-hunter/` directory
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.