ClawAudit verdict
okx-exchange
Executes real buy/sell orders on OKX exchange via authenticated API; while it defaults to paper trading mode, the skill enables live financial transactions via configured API keys.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
file_read+write
Findings (6)
Raw model control tokens — prompt injection via token manipulation
scripts/okx.py · prose · downgraded · [INST]
Possible hardcoded credential
scripts/tests/test_private_ws.py · prose · downgraded · secret="test_secret
Opens WebSocket connection
README_ZH.md · code · WebSocket
subprocess execution — runs system commands from Python
scripts/setup.py · prose · downgraded · subprocess.check_call(
Python os.getenv — reads environment variable
scripts/logger.py · prose · downgraded · os.getenv(
Python shutil file operation — copies/moves/deletes files
scripts/tests/bench_indicators.py · prose · downgraded · shutil.rmtree(
Permissions & capabilities
No declared permissions — minimal attack surface.
file_write Is this flag fair?
Thanks — recorded.