okx-security

Scan tokens, DApps, transactions, and signatures for phishing and approval risks.

Updated May 10, 2026
One-click install
npx skills add https://github.com/Tsin418/crypto-research-agent --skill okx-security-tsin418
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: okx-security
Source: https://github.com/Tsin418/crypto-research-agent/tree/main/.agents/skills/okx-security
Command: npx skills add https://github.com/Tsin418/crypto-research-agent --skill okx-security-tsin418

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps prevent users from losing funds to scams or unsafe on-chain actions by performing security checks before token trading, DApp interaction, signing, or approvals.

Core Features & Use Cases

  • Token risk scanning: Detects honeypots, phishing/gas-mint tokens, low liquidity, dumping, counterfeit patterns, and other token-level threats using an authoritative risk level output.
  • DApp/URL phishing detection: Flags malicious domains before the user accesses a website.
  • Transaction and signature pre-execution security: Screens calldata and signing requests (EVM and Solana where supported) and enforces a strict risk action policy (block/warn/pause behavior).
  • Approval safety & revoke guidance: Reviews ERC-20 and Permit2 authorizations for risky spenders and guides safe revoke flows.

Use Case: Before swapping or approving, run token risk scanning and transaction scanning on the approval/signing payload so the agent blocks or pauses on critical/high risk findings instead of proceeding blindly.

Quick Start

Ask your assistant to scan a token and its related approvals by running onchainos security token-scan and onchainos security tx-scan for the approve or revoke calldata.

Frequently Asked Questions about okx-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect honeypot tokens before executing a swap?

Honeypot detection is performed by scanning tokens for phishing, gas-mint, and counterfeit patterns before trading. The scan evaluates token risk levels to identify unsafe crypto interactions and prevent fund loss.

Can I screen EVM calldata for signature safety before signing an approval?

Yes, you can screen EVM calldata and EIP-12 signing requests for signature safety before execution. Transaction pre-execution security enforces strict risk actions like block, warn, or pause on risky payloads.

What is the best way to check DApp URLs for phishing risks?

The best way to check DApp URLs for phishing risks is using DApp phishing detection. This flags malicious domains before you access the website, preventing interaction with fraudulent DApps.

Does this security scanner work with Solana transaction simulation?

Yes, transaction and signature pre-execution security supports Solana transaction simulation where supported. It screens signing requests and enforces risk-priority outcomes before the user acts.

How do I review ERC-20 and Permit2 approvals for risky spenders?

Review ERC-20 and Permit2 approvals for risky spenders by running approval safety checks. This guides safe revoke flows and monitors authorization calldata to prevent unauthorized token transfers.

What happens when a transaction scan encounters a critical risk finding?

When a transaction scan encounters a critical risk finding, the agent enforces a strict risk action policy by blocking, warning, or pausing the execution. This fail-safe handling prevents proceeding blindly with unsafe transactions.