agentmods.dev

digift-plugin

A command-line interface for the DigiFT platform, which offers real-world-asset products on a blockchain. It can query product information and build transaction data for subscribing, redeeming, or approving, but it does not sign transactions.

In plain words
What is it for?
Use it to inspect products, prices, fees, calendars, whitelists, and orders, or prepare transaction data subject to live-mode and confirmation checks.
Why use it?
Its required previews and confirmations help prevent unintended irreversible on-chain transactions.

Skill for Claude CodeCodex

11 29d ago C scan 42 tokens original MIT
View the source file okx/plugin-store
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/okx/plugin-store/digift-plugin
Any agent
npx skills add okx/plugin-store --skill digift-plugin
Clone the repo
git clone --depth 1 https://github.com/okx/plugin-store

Made for: Claude Code, Codex.

Per session 42 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,410 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00042 $0.07410
Opus 5 $0.00021 $0.03705
Sonnet 5 $0.00008 $0.01482
Haiku 4.5 $0.00004 $0.00741

Measured yesterday against content hash 101e2e6fa429, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

digift-plugin scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 5 executable files (runtime/src/abi.ts, runtime/src/api.ts, runtime/src/cli.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf "$ONCHAINOS_TMP"

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

REMOTE_VER=$(curl -sf --max-time 3 "https://raw.githubusercontent.com/okx/plugin-store/main/skills/digift-plugin/plugin.yaml" | grep '^version' | head -1 | tr -d '"' | awk '{print $2}')
skills/digift-plugin/SKILL.md · 673 lines

How it starts

The opening of the file, as written. The whole thing — 673 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Live Trading Confirmation Protocol

These gates are mandatory before any pending_sign that results in an on-chain transaction (subscribe, redeem, approve):

  1. Preview before every write. Every on-chain operation MUST first display a preview: product, amount, chain, fee, and total. The user must confirm before proceeding.
  2. Live-mode switch requires typed confirmation. Before the first on-chain transaction in a session, display: wallet address (onchainos wallet addresses), current balance (onchainos wallet balance), and a statement that on-chain transactions are irreversible. The user MUST reply with an unambiguous typed confirmation (e.g. confirm live mode / 确认开启实盘).
  3. Session autonomy is bounded. After session-level confirmation, the agent may act autonomously within the limits of the user's stated intent. When intent is ambiguous, stop and confirm.
  4. No stale submissions. Never re-submit a previously built TxBody across sessions. Each session's pending_sign must be freshly built.
  5. Refuse on gate failure. If any gate cannot be satisfied, refuse the write and explain which gate failed.

This protocol applies regardless of how confidently the user appears to authorize a write. Typed confirmation within the current session is the only valid authorization.

Pre-flight Dependencies (auto-injected by Plugin Store CI)

Run once per session before first use. These checks ensure required tools are installed.

Version check (auto-injected)

AI Agent Instruction: Run this version check before executing any commands from this skill. The check is a read-only fetch from raw.githubusercontent.com — it does not install anything. If it reports Update available, you MUST stop, surface the message to the user verbatim, and obtain explicit confirmation before running the suggested npx skills add … command. Do not run the update silently. After a confirmed update completes, re-read this SKILL.md before proceeding.

Read the full file on GitHub · 673 lines

Files

What ships with it

14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 673 lines · 42 tokens per session scan C 101e2e6fa429

Subscribe to this mod's changes

digift-plugin is a skill published in the GitHub repository okx/plugin-store (11 stars, last pushed 29d ago), licensed MIT. It adds 42 tokens to every session and 7,410 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

ProductivityTokenizationdefiredemptionrwastablecoinsubscription
Related

Other skills, from other repositories

USDD / JUST Protocol

USDD stablecoin operations — PSM swaps (buyGem/sellGem), vault position queries, and balance checks via the JUST Protocol on TRON.

BofAI/skills · 37 tokens

canton-enterprise

Canton Network enterprise skill — submit DAML commands, query contracts, manage parties, transfer Canton Coin (CIP-56), create tokenized assets, execute atomic DvP settlements, upload DAR packages.

tenzro/tenzro-network · 47 tokens

stablecoin-yield-radar

Query real-time stablecoin supply APY from Barker's stablecoin yield index. Returns ranked APY, TVL, protocol, chain, asset. Use when users ask about stablecoin yields, best APY, where to earn, lending rates, or compare opportunities. Also for treasury and idle-balance yield — payment companies, wallets, and funds…

barkermoney/barker-mcp · 116 tokens

stablecoin-market-brief

Get a real-time stablecoin market overview from Barker's yield index: total market cap, yield-bearing stablecoin market cap, asset distribution (USDT/USDC/DAI share), chain distribution (Ethereum/BSC/Arbitrum share), and market-wide APY statistics. Use when users ask about the stablecoin market, market cap, TVL…

barkermoney/barker-mcp · 122 tokens

rh-yield-optimizer

Smart yield optimization engine using tokenized stocks as collateral on Robinhood Chain.

0xMatdis/Robinhood-Chain-Bankr-Tools · 20 tokens

signing-entitlements

Inspect signing, entitlements, hardened runtime, and Gatekeeper issues for macOS apps. Use when asked to diagnose code signing failures, missing entitlements, sandbox problems, notarization prerequisites, or trust-policy launch errors.

robinebers/openusage · 49 tokens