Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add okx/agent-trade-kit --skill okx-cex-portfoliogit clone --depth 1 https://github.com/okx/agent-trade-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/okx/agent-trade-kit/okx-cex-portfolio)<a href="https://agentmods.dev/skills/okx/agent-trade-kit/okx-cex-portfolio"><img src="https://agentmods.dev/badge/skills/okx/agent-trade-kit/okx-cex-portfolio/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/okx/agent-trade-kit/okx-cex-portfolio"><img src="https://agentmods.dev/badge/skills/okx/agent-trade-kit/okx-cex-portfolio.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 275 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Rogue Agent · line 592 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00236 | $0.07053 |
| Opus 5 | $0.00118 | $0.03527 |
| Sonnet 5 | $0.00047 | $0.01411 |
| Haiku 4.5 | $0.00024 | $0.00705 |
Grade A, and why
okx-cex-portfolio scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
3 near-identical copies found in the catalogue:
- okx-cex-portfolio — 100% identical, 0 lines differ
- okx-cex-portfolio — 91% identical, 94 lines differ
- okx-cex-portfolio — 91% identical, 94 lines differ
How it starts
The opening of the file, as written. The whole thing — 599 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OKX CEX Portfolio & Account CLI
Account balance, positions, P&L, bills, fees, and fund transfers on OKX exchange. Requires API credentials.
Preflight
Before running any command, follow ../_shared/preflight.md.
Use metadata.version from this file's frontmatter as the reference for Step 2.
Prerequisites
- Install
okxCLI:npm install -g @okx_ai/okx-trade-cli - Configure credentials:
okx config init # select site -> follow browser OAuth flow - Test with demo mode (simulated trading, no real funds):
okx --demo account balance
Security: NEVER accept credentials in chat. Guide users to
okx config initfor setup.
Credential & Profile Check
Run this check before any authenticated command. The auth method is detected during preflight Step 2 and remembered for the session.
Step A — Verify credentials
Check both sources (see preflight Step 2 for the decision table). okx auth status --json alone is insufficient — its apiKey field is always false and does NOT reflect the TOML config.
okx config show --json # authoritative for API-key presence
okx auth status --json # authoritative for OAuth session state
Branch in this order — first match wins:
config showhas any profile with a non-emptyapi_key— API Key mode. Proceed to Step B.- No API-key profile AND
auth statusreturns"status": "logged_in"— OAuth mode. Proceed to Step B. - No API-key profile AND
auth statusreturns"status": "pending"— login in progress, wait. - No API-key profile AND
auth statusreturns"status": "not_logged_in"— stop all operations, loadokx-cex-authskill and follow login steps, wait for completion.
Step B — Confirm trading mode
Resolution rules:
- Current message intent is clear (e.g. "real" / "实盘" / "live" → live; "test" / "模拟" / "demo" → demo) → use it and inform the user
- Current message has no explicit declaration → check conversation context for a previous choice:
- Found → reuse it, inform user
- Not found → ask:
"Live (实盘) or Demo (模拟盘)?"— wait for answer before proceeding
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 7c816d424277
- 7d ago Changed · +3 lines 22b0b08117b6
- 11d ago First seen · 596 lines · 236 tokens per session scan A 9b2c60b92b3c
okx-cex-portfolio is a skill published in the GitHub repository okx/agent-trade-kit (422 stars, last pushed 3d ago), licensed MIT. It adds 236 tokens to every session and 7,053 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
add-mechanic
Add game mechanics with correct GDScript 4.x patterns -- movement, health, inventory, save/load.
debug-issue
Systematic Godot debugging decision trees for physics, signals, rendering, navigation, and input issues.
build-scene
Pattern-based Godot scene construction with node hierarchy templates and companion node rules.
create-document
A tool for creating and posting documents in 1C, a business software system commonly used for accounting and operations. It checks the available document types and fields before writing data.
balances
A 1C accounting and inventory reporting workflow for balances, movements, documents, and reports. 1C is a Russian business-management system that stores stock and accounting records in registers.
prepayment-check
A prepayment check for a company or other business partner using its tax identification number. It examines bankruptcy, court cases, licences, registration status, and the person signing the contract.