OKX Trading with Permission Gate

• Outcome: Review
• Latest audit: May 29, 2026 · 9:39 PM UTC
• Version: 0.3.3

Overview

This OKX trading skill is mostly coherent, but it needs Review because it can place ongoing autonomous crypto orders and has a stop-flow safety flaw that may leave live exchange orders untracked.

Review carefully before installing. Use demo mode first, set strict OKX_ALLOWED_SYMBOLS and notional caps, and do not use live OKX keys unless you accept that confirmed grids can keep placing restock orders automatically. Be aware that stopping a grid may delete local tracking even if some exchange cancellations fail, so verify open orders directly on OKX after any stop or rescale failure.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (7)

Description-Behavior Mismatch

Medium

• Confidence: 95% confidence
• Finding: The file explicitly states that after initial confirmation, subsequent fills are handled by another script without further confirmation. That behavior contradicts the stated human-in-the-loop guarantee and creates standing authority for future trade actions, which is especially risky in a trading skill where market conditions can change rapidly and automated follow-up orders can materially alter exposure.

Intent-Code Divergence

Medium

• Confidence: 92% confidence
• Finding: The script prints an instruction to schedule unattended periodic execution of grid maintenance. In the context of a skill advertised as having a strict confirmation gate, this encourages operators or downstream agents to enable autonomous trading behavior that bypasses fresh chat approval for later executions.

Description-Behavior Mismatch

Medium

• Confidence: 95% confidence
• Finding: This is a real integrity and safety flaw: the script deletes the local strategy state even when some order cancellations fail, leaving live exchange orders that are no longer tracked locally. In a trading skill whose description promises a strict human-in-the-loop stop flow, this can cause unmanaged exposure, surprise fills, and loss of operator visibility after the user believes the grid was stopped.

Intent-Code Divergence

Medium

• Confidence: 91% confidence
• Finding: The docstring reflects intended behavior that all active orders should be cancelled before strategy deletion, but the implementation does not enforce that guarantee. In this skill context, that mismatch is dangerous because users may rely on the stop action as authoritative while residual live orders remain on OKX, creating financial risk and operational confusion.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: This code places exchange orders and persists strategy state that enables later autonomous maintenance, but the execution path provides no explicit last-mile warning to the user that live or demo orders are being submitted and that follow-on actions may continue from saved state. In a financial trading context, that increases the chance of unintended order placement, misunderstanding of autonomy scope, and unmanaged losses.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

python-okx>=0.4.0
numpy>=1.24

• Confidence: 96% confidence
• Finding: python-okx>=0.4.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

python-okx>=0.4.0
numpy>=1.24

• Confidence: 95% confidence
• Finding: numpy>=1.24

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.