This is OKX's security scanner for web3 operations. It covers five main areas: token risk analysis (honeypot detection, tax checks), DApp phishing detection, transaction pre-execution scanning for both EVM and Solana, signature safety validation for EIP-712 and personal_sign, and token approval management including ERC-20 and Permit2. The skill takes security seriously with checksum verification for binaries, mandatory version drift checks, and a clear fail-safe principle: if a scan fails due to infrastructure issues, it asks the user explicitly rather than silently proceeding. Risk responses follow a block/warn/safe priority system, with different handling for buying versus selling risky tokens. It's built for anyone doing onchain transactions who wants an extra layer of automated security review before signing.

skills.sh installs
6.5K
GitHub stars
347
last updated
Aug 21, 2026

Install

$ npx -y skills add okx/onchainos-skills --skill okx-security --agent claude-code

Installs into .claude/skills of the current project.

Files

This is OKX's security scanner for web3 operations. It covers five main areas: token risk analysis (honeypot detection, tax checks), DApp phishing detection, transaction pre-execution scanning for both EVM and Solana, signature safety validation for EIP-712 and personal_sign, and token approval management including ERC-20 and Permit2. The skill takes security seriously with checksum verification for binaries, mandatory version drift checks, and a clear fail-safe principle: if a scan fails due to infrastructure issues, it asks the user explicitly rather than silently proceeding. Risk responses follow a block/warn/safe priority system, with different handling for buying versus selling risky tokens. It's built for anyone doing onchain transactions who wants an extra layer of automated security review before signing.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/okx/onchainos-skills
Categories
Security, AI & Agent Building, Finance & Trading, Web3 & Blockchain

More from okx/onchainos-skills

All 32

Recommended

More Security
1giuseppe-trisciuoglio avatarnextjs-authenticationgiuseppe-trisciuoglio/developer-kitProvides authentication implementation patterns for Next.js 15+ App Router using Auth.js 5 (NextAuth.js). Use when setting up authentication flows, implementing3.9Kskills.sh installs
2yaklang avatarcsrf-cross-site-request-forgeryyaklang/hack-skillsCSRF testing playbook. Use when reviewing state-changing web flows, anti-CSRF defenses, SameSite behavior, JSON CSRF, login CSRF, and OAuth state handling.3.9Kskills.sh installs
3raroque avatarvibe-securityraroque/vibe-security-skillAudits codebases for common security vulnerabilities that AI coding assistants introduce in "vibe-coded" applications. Checks for exposed API keys, broken acces3.8Kskills.sh installs
4waynesutton avatarconvex-security-checkwaynesutton/convexskillsQuick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling2.5Kskills.sh installs
5anthropics avatarsetup-zoom-oauthanthropics/knowledge-work-pluginsImplement Zoom authentication correctly. Use when setting up app credentials, choosing an OAuth grant, requesting scopes, handling token refresh, or debugging a2.1Kskills.sh installs
6anthropics avatarzoom-oauthanthropics/knowledge-work-pluginsReference skill for Zoom authentication. Use after routing to an auth workflow when choosing app credentials, grant types, scopes, token refresh behavior, or de2.1Kskills.sh installs