agentmods.dev

digift-plugin

digift-plugin is a skill for Claude Code from okx/plugin-store. It costs 42 tokens per session (7,410 once invoked), scanned C, original, MIT.

A command-line interface for the DigiFT platform, which offers real-world-asset products on a blockchain. It can query product information and build transaction data for subscribing, redeeming, or approving, but it does not sign transactions.

In plain words
What is it for?
Use it to inspect products, prices, fees, calendars, whitelists, and orders, or prepare transaction data subject to live-mode and confirmation checks.
Why use it?
Its required previews and confirmations help prevent unintended irreversible on-chain transactions.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: positional $N argument.

Part of the digift-plugin plugin — 1 skill shipped together

not rated 12repo 18d ago C scan 42 tokens original MIT

Good fit Use it to inspect products, prices, fees, calendars, whitelists, and orders, or prepare transaction data subject to live-mode and confirmation checks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/okx/plugin-store/digift-plugin
View source ↗ okx/plugin-store
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add okx/plugin-store --skill digift-plugin
Clone the repo
git clone --depth 1 https://github.com/okx/plugin-store

Made for: Claude Code.

Or install digift-plugin, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for digift-plugin

README.md
[![agentmods](https://agentmods.dev/badge/skills/okx/plugin-store/digift-plugin/github.svg)](https://agentmods.dev/skills/okx/plugin-store/digift-plugin)
Your own site
<a href="https://agentmods.dev/skills/okx/plugin-store/digift-plugin"><img src="https://agentmods.dev/badge/skills/okx/plugin-store/digift-plugin/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for digift-plugin

Your own site · 80×15
<a href="https://agentmods.dev/skills/okx/plugin-store/digift-plugin"><img src="https://agentmods.dev/badge/skills/okx/plugin-store/digift-plugin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 42 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,410 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00042 $0.07410
Opus 5.5 $0.00017 $0.02964
Sonnet 5.5 $0.00008 $0.01482
Haiku 4.5 $0.00004 $0.00741

Measured 1mo ago against content hash 101e2e6fa429, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

digift-plugin scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 5 executable files (runtime/src/abi.ts, runtime/src/api.ts, runtime/src/cli.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf "$ONCHAINOS_TMP"

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

REMOTE_VER=$(curl -sf --max-time 3 "https://raw.githubusercontent.com/okx/plugin-store/main/skills/digift-plugin/plugin.yaml" | grep '^version' | head -1 | tr -d '"' | awk '{print $2}')
skills/digift-plugin/SKILL.md · 673 lines

How it starts

The opening of the file, as written. The whole thing — 673 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Live Trading Confirmation Protocol

These gates are mandatory before any pending_sign that results in an on-chain transaction (subscribe, redeem, approve):

  1. Preview before every write. Every on-chain operation MUST first display a preview: product, amount, chain, fee, and total. The user must confirm before proceeding.
  2. Live-mode switch requires typed confirmation. Before the first on-chain transaction in a session, display: wallet address (onchainos wallet addresses), current balance (onchainos wallet balance), and a statement that on-chain transactions are irreversible. The user MUST reply with an unambiguous typed confirmation (e.g. confirm live mode / 确认开启实盘).
  3. Session autonomy is bounded. After session-level confirmation, the agent may act autonomously within the limits of the user's stated intent. When intent is ambiguous, stop and confirm.
  4. No stale submissions. Never re-submit a previously built TxBody across sessions. Each session's pending_sign must be freshly built.
  5. Refuse on gate failure. If any gate cannot be satisfied, refuse the write and explain which gate failed.

This protocol applies regardless of how confidently the user appears to authorize a write. Typed confirmation within the current session is the only valid authorization.

Pre-flight Dependencies (auto-injected by Plugin Store CI)

Run once per session before first use. These checks ensure required tools are installed.

Version check (auto-injected)

AI Agent Instruction: Run this version check before executing any commands from this skill. The check is a read-only fetch from raw.githubusercontent.com — it does not install anything. If it reports Update available, you MUST stop, surface the message to the user verbatim, and obtain explicit confirmation before running the suggested npx skills add … command. Do not run the update silently. After a confirmed update completes, re-read this SKILL.md before proceeding.

Read the full file on GitHub · 673 lines

Files

What ships with it

14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 673 lines · 42 tokens per session scan C 101e2e6fa429

Subscribe to this mod's changes

digift-plugin is a skill published in the GitHub repository okx/plugin-store (12 stars, last pushed 18d ago), licensed MIT. It adds 42 tokens to every session and 7,410 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Finance and fintechTokenizationWeb3 and blockchaindefiredemptionrwastablecoinsubscription
Related

Other skills, from other repositories

USDD / JUST Protocol

USDD stablecoin operations — PSM swaps (buyGem/sellGem), vault position queries, and balance checks via the JUST Protocol on TRON.

BofAI/skills · 37 tokens

stablecoin-yield-radar

Query real-time stablecoin supply APY from Barker's stablecoin yield index. Returns ranked APY, TVL, protocol, chain, asset. Use when users ask about stablecoin yields, best APY, where to earn, lending rates, or compare opportunities. Also for treasury and idle-balance yield — payment companies, wallets, and funds…

barkermoney/barker-mcp · 116 tokens

stablecoin-market-brief

Get a real-time stablecoin market overview from Barker's yield index: total market cap, yield-bearing stablecoin market cap, asset distribution (USDT/USDC/DAI share), chain distribution (Ethereum/BSC/Arbitrum share), and market-wide APY statistics. Use when users ask about the stablecoin market, market cap, TVL…

barkermoney/barker-mcp · 122 tokens

rh-yield-optimizer

Smart yield optimization engine using tokenized stocks as collateral on Robinhood Chain.

0xMatdis/Robinhood-Chain-Bankr-Tools · 20 tokens

aomi-transact

Build natural-language crypto/DeFi agents and EVM MCP plugins (Claude Code, Cursor, Codex, Gemini). Aomi turns prompts into wallet-signed txs on Ethereum, Base, Arbitrum, Optimism, Polygon, Linea — non-custodial, fork-simulated. 40+ apps: Uniswap, Aave, Lido, Morpho, GMX, Hyperliquid, Polymarket.

sickn33/agentic-awesome-skills · 95 tokens

trading-solana

Trade tokens on Solana DEXes - Jupiter, Raydium, Orca, Meteora, Pump.fun.

alsk1992/CloddsBot · 28 tokens