← Back to Skills Marketplace
470
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install okx-mcp-skill
Description
Use OKX OnchainOS MCP through UXC for token discovery, market data, wallet balance, and swap execution planning. Use when tasks need OKX MCP tools such as to...
Usage Guidance
Key issues to consider before installing: (1) SKILL.md requires the 'uxc' CLI and uses a linked command 'okx-mcp-cli' but the skill metadata advertises no required binaries — ensure you have uxc installed and trust that CLI. (2) The skill expects an OKX API key (examples show OKX_ACCESS_KEY or op:// vault paths) but metadata doesn't declare required env vars; do not store sensitive keys in places you don't control. (3) The README includes a public demo API key — fine for read-only testing but replace it for production. (4) The op:// example references an organizational secret path; confirm you understand where secrets would be stored and that you won't accidentally grant access to broader vaults. (5) If you need stronger assurance, ask the publisher to update metadata to declare required binaries (uxc, okx-mcp-cli) and env vars, and to remove or clearly label any demo keys / example secret paths. Run this skill in a restricted environment until you verify behavior.
Capability Analysis
Type: OpenClaw Skill
Name: okx-mcp-skill
Version: 1.0.1
The skill bundle is benign. It provides instructions and examples for interacting with the OKX OnchainOS MCP API via the `uxc` tool. The documentation (`SKILL.md`, `references/usage-patterns.md`) explicitly instructs the AI agent to require user confirmation for high-impact operations like `dex-okx-dex-approve-transaction` and `dex-okx-dex-swap`, which is a strong security measure against prompt injection for critical actions. API keys are handled securely via environment variables or 1Password (`secret-env`, `secret-op`), and a provided trial key is explicitly stated as read-only. The `scripts/validate.sh` enforces good documentation practices, including avoiding generic commands that could be abused. No evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation was found.
Capability Assessment
Purpose & Capability
The skill's name/description (OKX MCP via UXC) matches the instructions (calls to web3.okx.com via uxc/okx-mcp-cli). However the metadata declares no required binaries or env vars while the runtime instructions explicitly require the 'uxc' CLI, a linked 'okx-mcp-cli', network access to https://web3.okx.com/api/v1/onchainos-mcp, and an OKX API key. That mismatch (declared nothing vs. instructions needing tools/keys) is incoherent.
Instruction Scope
SKILL.md instructs the agent to run commands (uxc, okx-mcp-cli) and to configure credentials using either an env var (OKX_ACCESS_KEY) or an operator secret path (op://Engineering/okx/OK-ACCESS-KEY). Those instructions access environment/secret sources that are not declared in metadata. The docs also embed a literal demo API key for read-only trials — useful for testing but increases risk if users copy it unintentionally into production credentials.
Install Mechanism
This is an instruction-only skill with no install spec; nothing is downloaded or written by the skill itself. The included scripts/validate.sh are repo-validation helpers and not part of runtime installation, so install risk is low.
Credentials
Requesting an OKX API key is appropriate for the stated purpose, but the skill metadata lists no required env vars and no primary credential while the SKILL.md references OKX_ACCESS_KEY and an op:// secret source. The example op:// path (op://Engineering/okx/...) suggests an operator vault path — it's only an example, but it could confuse users into granting or pointing to broader secrets than necessary. Overall the credential handling is plausible but not proportionately declared or explained.
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges. It does not modify other skills or system-wide settings in the instructions. Default autonomous invocation is allowed (platform default) and is not, by itself, a red flag here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install okx-mcp-skill - After installation, invoke the skill by name or use
/okx-mcp-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
okx-mcp-skill 1.0.1
- Improved credential setup documentation to clarify the required use of the --api-key-header option when configuring credentials.
- Updated instructions for resolving "Request header OK-ACCESS-KEY can not be empty" errors.
- Minor clarifications in the guardrails and core workflow setup steps.
v1.0.0
Initial release of okx-mcp-skill.
- Enables interaction with OKX OnchainOS MCP via UXC for token discovery, market data, wallet balance, and swap execution planning.
- Provides a detailed guide for setup, API key usage, and recommended workflows.
- Lists core supported operations including token search, price/trades/candlesticks, balance queries, and DEX swap commands.
- Includes guardrails for secure authentication, safe operation execution, and schema inspection before running high-impact actions.
- Offers quick references for supported chain indices and typical usage examples.
Metadata
Frequently Asked Questions
What is OKX MCP Skill?
Use OKX OnchainOS MCP through UXC for token discovery, market data, wallet balance, and swap execution planning. Use when tasks need OKX MCP tools such as to... It is an AI Agent Skill for Claude Code / OpenClaw, with 470 downloads so far.
How do I install OKX MCP Skill?
Run "/install okx-mcp-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OKX MCP Skill free?
Yes, OKX MCP Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OKX MCP Skill support?
OKX MCP Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OKX MCP Skill?
It is built and maintained by jolestar (@jolestar); the current version is v1.0.1.
More Skills