okx-security

Scans tokens, DApps, transactions, signatures, and approvals for onchain security risks.

Updated Apr 5, 2026
One-click install
npx skills add https://github.com/Nith567/xlayer-skills-arena --skill okx-security-nith567
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: okx-security
Source: https://github.com/Nith567/xlayer-skills-arena/tree/main/okx-security
Command: npx skills add https://github.com/Nith567/xlayer-skills-arena --skill okx-security-nith567

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Interacting with DeFi exposes users to honeypot tokens, phishing DApps, malicious approvals, and dangerous signatures. This Skill runs pre-execution security checks via the OKX Onchain OS CLI so risky transactions are blocked before funds are lost. ## Core Features & Use Cases - Token Risk & Honeypot Detection: Batch-scan ERC-20 and SPL tokens across 12+ chains for risk flags, buy/sell taxes, and honeypot behavior. - Transaction & Signature Pre-Execution Scans: Simulate and risk-score EVM and Solana transactions plus EIP-712/personal_sign messages, with block/warn/safe verdicts. - DApp Phishing & Approval Management: Check URLs for phishing and audit ERC-20/Permit2 allowances, with guided revoke workflows for risky approvals. - Use Case: Before swapping into a new meme token, scan the token contract, then scan the approve calldata — if the spender is blacklisted, the workflow stops and warns you instead of executing. ## Quick Start Ask the agent to check whether a specific token contract or DApp URL is safe before you trade or connect your wallet.

Frequently Asked Questions about okx-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a token is a honeypot before buying?▼

Run onchainos security token-scan with the chain ID and contract address, such as --tokens "1:0x...". The scan returns risk flags, buy/sell taxes, and an isRiskToken verdict; high-risk tokens should not be purchased.

How to check if a crypto transaction is safe before signing?▼

Use onchainos security tx-scan with the chain, sender address, and calldata for EVM, or encoded payloads for Solana. It simulates the transaction and returns an action of safe, warn, or block with detailed risk items.

Does the security scan support Solana transactions?▼

Yes, tx-scan supports Solana by passing --chain solana with a Base58 sender address, an encoding of base58 or base64, and the transaction payloads. Token scanning also covers SPL tokens, but approvals and sig-scan are EVM-only.

How do I find and revoke risky token approvals?▼

Run onchainos security approvals with your EVM wallet address to list all ERC-20 and Permit2 allowances with risk levels. For risky entries, build an approve(spender, 0) revoke calldata, tx-scan it, then execute via wallet contract-call or external broadcast.

What happens if a security scan fails or times out?▼

The skill follows a fail-safe principle: any scan failure due to network errors, rate limits, or malformed responses means the associated transaction, approval, or signature must not proceed. The error is reported and a retry is suggested.

Do I need a wallet login to run security scans?▼

No, security commands work with any address without wallet login. When logged in with an Agentic Wallet, the skill can fetch your balances first and scan all held tokens automatically.