Okx Dex Signal

Name/description match the instructions: the skill is an adapter that issues `onchainos` CLI commands (tracker, signal, leaderboard). Asking the user to ensure the onchainos CLI is present is consistent with the skill's purpose.

SKILL.md (via _shared/preflight.md) instructs the agent to fetch the latest release tag from GitHub, download installer/checksum files, verify SHA256, and run the installer script. Those actions go beyond read-only querying and direct the agent to perform network downloads and execute code on the host; this materially expands the skill's runtime authority.

Although the preflight uses well-known hosts (api.github.com, raw.githubusercontent.com, github.com/releases/download), it explicitly tells the agent to download and execute an installer script. There is no formal install spec in the registry — the install mechanism is embedded in instructions, which increases risk because arbitrary remote code would be executed if followed automatically.

The registry metadata requests no environment variables or credentials. The WebSocket doc describes optional OKX API keys for authenticated WS connections (reasonable and documented), but the skill does not require secrets by default.

The preflight expects to read/write local cache paths (e.g., ~/.onchainos/last_check, ~/.local/bin/onchainos) and to install a binary into the user's environment if missing. The skill is not marked always:true, but following its preflight will produce persistent local state and a new executable — a non-trivial privilege for an instruction-only skill.