okx

What this skill does

# OKX OnChainOS — Skills Directory

> **What this file is:** a directory page that points to OKX's official
> `onchainos-skills` repo. It contains **no logic of its own** — every sub-skill
> below lives upstream at [`okx/onchainos-skills`](https://github.com/okx/onchainos-skills)
> and is fetched fresh on install, so you always get the latest version.

OKX OnChainOS is a suite of **22 specialized sub-skills** covering on-chain
trading, market analytics, smart-money signals, DeFi investing & positions,
cross-chain bridging, wallet ops, security scanning, payment protocols, and
real-time data streams across 20+ blockchains (Ethereum, Solana, XLayer, Base,
BSC, Arbitrum, Polygon, Optimism, Avalanche, TRON, …).

Most sub-skills drive a single binary, `onchainos`, which is downloaded on first
use. A subset of capabilities (read-only data) can also be accessed without the
binary, via Starchild's sc-proxy — see **Authentication options** below.

---

## How install actually works

```bash
# Install one sub-skill (recommended — pulls just what you need)
npx skills add okx/onchainos-skills@<sub-skill-name>

# Or via long form
npx skills add https://github.com/okx/onchainos-skills --skill <sub-skill-name>
```

There is **no batched "install all"** — install the sub-skills you actually
need. Each sub-skill ships its own SKILL.md + reference docs + trigger phrases.

---

## Wallet — default to the user's Agent Wallet

Use the platform `wallet` skill for signing and broadcasting. OKX DEX
endpoints return unsigned calldata (`{to, value, data, ...}`); feed it to
`wallet_transfer(data=<calldata>)` and you're done. No separate OKX wallet
needed.

Only use the OnchainOS TEE wallet (`onchainos wallet login <email>`) when
the user explicitly asks for it.

---

## Authentication options (read this before invoking anything)

There are two distinct paths. Pick based on what the agent needs to do:

### Path A — Direct HTTP via Starchild sc-proxy (no API Key needed)

For read-only data lookups (prices, K-line, smart-money signals, token
analytics, security checks, public-address portfolios — **≈ 80 % of OnchainOS
capabilities**), the agent can skip the CLI entirely and call
`https://web3.okx.com/...` directly through sc-proxy:

```python
from core.http_client import proxied_get
r = proxied_get(
    "https://web3.okx.com/api/v6/dex/aggregator/supported/chain",
    headers={"SC-CALLER-ID": f"chat:{thread_id}"},
)
```

sc-proxy auto-injects platform OKX credentials, signs each request with
HMAC-SHA256, and bills the caller's Starchild credits.

- **Cost**: $0.001 / request
- **Rate limit**: 60 req/min
- **Setup**: none
- **Limits**: data only — cannot send transactions or manage wallets

### Path B — `onchainos` CLI with your own OKX Web3 API Key

For wallet ops (`wallet login`, `wallet send`, `wallet contract-call`), DEX
swaps that need execution, cross-chain bridges, strategy orders, payments, and
any other CLI-driven workflow, the user must bring their own credentials:

1. Apply at [web3.okx.com → Build → Dev Portal](https://web3.okx.com/build/dev-portal)
2. Set env vars:
   ```bash
   export OKX_API_KEY=<your key>
   export OKX_SECRET_KEY=<your secret>
   export OKX_PASSPHRASE=<your passphrase>
   ```
3. Run any sub-skill's CLI commands.

### Why the CLI can't use sc-proxy

The `onchainos` binary uses Rust's `rustls` TLS stack with **bundled
`webpki-roots`** — a compile-time copy of the Mozilla root CA list. It ignores
the system trust store, ignores `SSL_CERT_FILE`, and has no documented env
override. As a result, sc-proxy's MITM CA is rejected as `UnknownIssuer`, and
the CLI cannot be transparently proxied. Path A (direct HTTP from agent
scripts) is the only way to use platform credentials with OnchainOS today.

Wallet creation (`onchainos wallet login <email>`) gives you a fresh TEE-managed
account — it does NOT import your existing OKX App / extension wallet.

---

## Sub-skills by category

### 📊 Discovery & Market Data (8)

| Sub-skill | Use for |
|---|---|
| `okx-dex-market` | Real-time prices, K-line / OHLC, index price, wallet PnL, address tracker |
| `okx-dex-token` | Token search, holder distribution (whales / smart money / snipers), top traders, cluster analysis, honeypot/rug checks |
| `okx-dex-signal` | Smart-money / whale / KOL buy signals, top-trader leaderboards |
| `okx-dex-trenches` | Meme launchpad scanning (pump.fun, BSC, X Layer, TRON), dev rug history, bundle/sniper detection, co-investor tracking |
| `okx-dex-social` | Crypto news feed + search, social sentiment ranking, KOL vibe & leaderboard |
| `okx-dex-ws` | WebSocket real-time streams (price, candle, trades, signals, tracker, meme) — CLI + custom script use |
| `okx-defi-portfolio` | View existing DeFi positions across protocols (lending / LP / staking) |
| `okx-dapp-discovery` | Bootstrap router: resolves a named DApp (Polymarket, Aave, Hyperliquid, etc.) to its plugin and forwards the prompt |

### 🔄 Trading & Execution (5)

| Sub-skill | Use for |
|---|---|
| `okx-dex-swap` | Multi-chain DEX aggregation across 500+ liquidity sources — quote, approve, swap |
| `okx-dex-bridge` | Cross-chain swap/transfer via Stargate / Across / Relay / Gas.zip — quote, build, track |
| `okx-dex-strategy` | Limit orders (TP / SL / buy-dip / chase-high) stored & auto-executed in TEE |
| `okx-defi-invest` | DApp-agnostic DeFi yield discovery + deposit/withdraw/claim (no named protocol) |
| `okx-onchain-gateway` | Gas price + estimate, transaction simulation, signed-tx broadcast, order tracking |

### 💼 Wallet (2)

| Sub-skill | Use for |
|---|---|
| `okx-agentic-wallet` | OnchainOS wallet lifecycle: login / verify OTP / status / addresses / balance / send (native + ERC-20 + SPL) / tx history / contract-call |
| `okx-wallet-portfolio` | Read-only portfolio for any public address — total value, all token balances, per-token lookup |

### 🔐 Security (1)

| Sub-skill | Use for |
|---|---|
| `okx-security` | Token risk & honeypot scan, DApp phishing scan, transaction pre-execution sim, signature safety, ERC-20/Permit2 approvals management |

### 💸 Payments (3)

| Sub-skill | Use for |
|---|---|
| `okx-agent-payments-protocol` | **Unified dispatcher** — handles x402 (`exact` / `aggr_deferred`), MPP (`charge` / `session`), and a2a-pay paymentId flows. Auto-detects 402 protocol from response headers. |
| `okx-x402-payment` | Direct x402 signing entry (still supported; new code prefers `okx-agent-payments-protocol`) |
| `okx-a2a-payment` | ⚠️ DEPRECATED — folded into `okx-agent-payments-protocol`. Stub kept only for legacy aliases. |

### 🛠️ Ops & Onboarding (3)

| Sub-skill | Use for |
|---|---|
| `okx-how-to-play` | Entry router for blank/onboarding prompts ("what does this do", "how do I start"). Routes to a concrete workflow in ≤ 3 turns. |
| `okx-growth-competition` | Agentic Wallet exclusive trading competitions: list → join → rank → claim |
| `okx-audit-log` | Audit log file path for offline debugging (`~/.onchainos/audit.jsonl`) |

---

## Quick task → sub-skill map

| I want to… | Sub-skill | Suggested path |
|---|---|---|
| Check a token price or chart | `okx-dex-market` | A (no key) |
| Search / analyze a token's holders | `okx-dex-token` | A (no key) |
| Follow smart money buys | `okx-dex-signal` | A (no key) |
| Scan new meme launches | `okx-dex-trenches` | A (no key) |
| Stream live market data over WS | `okx-dex-ws` | B (CLI/WS client) |
| Look at any public wallet | `okx-wallet-portfolio` | A (no key) |
| Scan a token / dApp for risk | `okx-security` | A (no key) |
| Estimate gas / simulate a tx | `okx-onchain-gateway` | A or B |
| Manage / send from my own wallet | `okx-agentic-wallet` | B (requires login) |
| Swap tokens (same chain) | `okx-dex-swap` REST + sign with the `wallet` skill (Agent Wallet) |
| Bridge tokens (cross chain) | `okx-dex-bridge` | B (signing) |
| Place a limit order | `okx-dex-strategy` | B (TEE storage) |
| Find best DeFi yield (any protocol) | `okx-defi-invest` | B (signi