← Back to Skills Marketplace
169
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install okx-cex-skill-mp
Description
Use this skill when the user asks to: 'find a trading skill', 'search for skills', 'install a skill', 'add a skill', 'download a skill', 'browse skill market...
Usage Guidance
This skill appears to be a marketplace manager and its behavior (installing skills from the OKX marketplace) matches that description — but there are inconsistencies in the package metadata and the runtime instructions perform high‑impact actions. Before installing or using it: 1) Verify the OKX CLI package (@okx_ai/okx-trade-cli) is official and from a trusted source (check npm publisher, package integrity, vendor docs). 2) Be cautious about running global npm installs and 'npx' commands — consider testing in an isolated environment. 3) Understand that 'okx skill add' will download and install third‑party skills into your agents' skill directories (and may run install-time scripts); only install skills from authors you trust and inspect the downloaded SKILL.md/_meta.json before enabling them. 4) Resolve the manifest inconsistency: the registry shows no required binaries/env while SKILL.md requires the 'okx' CLI and API credentials — ask the publisher to correct metadata. If you want to limit blast radius, prefer using 'okx skill download' and manually review/unpack the zip rather than automatic 'add' that installs into all agents.
Capability Analysis
Type: OpenClaw Skill
Name: okx-cex-skill-mp
Version: 1.3.2
The skill bundle functions as a package manager for the OKX Skills Marketplace, enabling the agent to search for and install third-party code. It is classified as suspicious because its core functionality involves high-risk behaviors: installing a global npm package (@okx_ai/okx-trade-cli), requiring API credentials, and executing a download-and-install flow (okx skill add) that runs unvetted third-party skills with the agent's full system permissions. While these actions are aligned with the stated purpose in SKILL.md, the bundle serves as a high-privilege gateway for potentially malicious third-party content.
Capability Assessment
Purpose & Capability
The SKILL.md describes a marketplace manager (search, download, install, remove skills) and its required artifacts (okx CLI and marketplace API credentials) are coherent with that purpose. However, the registry metadata presented to the evaluator claims no required binaries/env vars while the SKILL.md explicitly requires the 'okx' CLI and API credentials. This mismatch is an inconsistency that should be resolved before trust.
Instruction Scope
The instructions tell the agent to run the OKX CLI to download skill packages, extract them, run 'npx skills add', and install to all detected agents. That behavior is within the marketplace role but it also grants the skill the ability to fetch and install arbitrary third‑party skills (which will run with the agent's full permissions). The SKILL.md also suggests global npm installs and running 'okx config init' to store API credentials. These steps collect/configure credentials and install/execute downloaded code — scope is broad and requires explicit user trust and review.
Install Mechanism
Installation is instruction-only (no code files in skill bundle), but the SKILL.md recommends installing a scoped npm package (@okx_ai/okx-trade-cli). Using npm is a common delivery method for a CLI, but it can execute arbitrary code and is a moderate-risk install mechanism. There is also an internal inconsistency: the top-level manifest claimed 'No install spec', but the SKILL.md contains an install block describing the npm package. That discrepancy is worth clarifying.
Credentials
The SKILL.md says marketplace access requires API credentials and asks the user to run 'okx config init' to configure them. Requesting marketplace API credentials is expected for this functionality. There are no unrelated credentials requested. The manifest metadata, however, did not declare these env requirements — another inconsistency.
Persistence & Privilege
The skill does not set always:true (good), but it instructs installation of downloaded skills into all detected agents and uses 'npx skills add' to propagate installs across agent environments. That means a user invoking this can cause code to be added to other agent runtimes and to agent skill directories (e.g., ~/.agents/skills/). Modifying other agents' skill sets is a significant side effect and raises privilege/persistence concerns unless the user knowingly authorizes it.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install okx-cex-skill-mp - After installation, invoke the skill by name or use
/okx-cex-skill-mp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.2
- Update okx CLI requirement to @okx_ai/[email protected] in SKILL.md metadata.
- Bump skill version to 1.3.2.
- No functionality changes; only metadata and dependency updates.
v1.3.1
Version 1.3.1
- Bumped metadata version from 1.3.0 to 1.3.1.
- No other changes detected to files or documentation content.
v1.3.0
- Added a prominent third-party content notice: clarifies that skills on the marketplace are created by independent developers, not OKX, and should be reviewed/trusted like third-party software.
- Expanded the `okx skill download` command with a new `--format zip|skill` option to support both `.zip` and `.skill` package formats.
- Updated MCP tool documentation: by default, MCP `skills_download` now downloads packages in `.skill` format, with an option for `.zip`.
- Improved CLI command documentation with updated flags (`--json`, `--env`) and further cautions about safe skill installation.
- Version bump to 1.3.0.
v1.2.8
Version 1.2.8
- Improved documentation and command references for all OKX Skills Marketplace management operations.
- Explicitly outlined the recommended skill installation flow, including error handling and manual fallback options.
- Added details for CLI and MCP tool usage, with comprehensive examples and sample outputs.
- Updated prerequisites and installation strategy to clarify API credential requirements.
- Expanded command descriptions and marketplace error code explanations for better troubleshooting.
Metadata
Frequently Asked Questions
What is okx-cex-skill-mp?
Use this skill when the user asks to: 'find a trading skill', 'search for skills', 'install a skill', 'add a skill', 'download a skill', 'browse skill market... It is an AI Agent Skill for Claude Code / OpenClaw, with 169 downloads so far.
How do I install okx-cex-skill-mp?
Run "/install okx-cex-skill-mp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is okx-cex-skill-mp free?
Yes, okx-cex-skill-mp is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does okx-cex-skill-mp support?
okx-cex-skill-mp is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created okx-cex-skill-mp?
It is built and maintained by numpy0001 (@numpy0001); the current version is v1.3.2.
More Skills