| name | okx-agentic-wallet |
| description | Use this skill whenever the user wants to use OKX Onchain OS / onchainos CLI / agentic wallet for wallet state or on-chain actions. Triggers: onchainos, Onchain OS wallet, agentic wallet; wallet login/status/account/address/balance/holdings/deposit/receive/send/transfer; on-chain swap/DEX trade/buy/sell/convert; bridge; Gas Station; contract calls; transaction history/status; Bitcoin UTXOs, BRC-20, inscriptions; signing; approvals; wallet export/policy; token or DApp security checks; or audit log. |
| license | MIT |
| metadata | {"author":"okx","version":"4.5.2","homepage":"https://web3.okx.com"} |
Onchain OS Wallet
Unified wallet skill driving the onchainos CLI: wallet lifecycle, Gas Station, DEX swap, cross-chain bridge, limit-order strategy, transaction gateway, public-address portfolio, security scanning, and audit log.
Intent Routing
Match the user intent to a row, then read that row's linked file first — it holds the flow. Read only the matched file; do not load other rows' files. Each file links its own deeper files (cli-reference, troubleshooting) at the bottom via explicit links — open those when the flow needs them; never construct a file path yourself.
| User Intent | Reference |
|---|
| Sign in / connect / social login (Google / Apple / Email) / logout; add / switch account; login status | wallet |
| My wallet address / QR code; check my (logged-in) balance / holdings, including BTC or a BRC-20 ticker | wallet |
| Bitcoin UTXO-specific queries, management, or FAQ / definitions | utxo-cli-reference |
| Send / transfer native, ERC-20, SPL, BTC, BRC-20, or SUI tokens | wallet |
| Call a contract (approve / deposit / withdraw / custom function), including a SUI PTB | wallet |
| Transaction history / tx detail / order status; sign a message (personalSign / EIP-712) | wallet |
| Policy / spending limit / whitelist; export wallet / mnemonic; MEV protection for a contract-call; third-party Solana plugin write pre-flight | wallet |
| Apple-login wallet differs from the OKX Wallet App / "missing" balance; rename a wallet or account; how transaction signing works (TEE) | account-faq |
Pay gas with a stablecoin on Solana; enable / disable / change default gas token / status; a send / contract-call returns gasStationUsed or a Gas Station Confirming; Gas Station FAQ / "check order" | gas-station |
| Swap / trade / buy / sell / convert tokens; quote; best route; calldata-only swap; liquidity sources; ERC-20 approval for a DEX | swap |
| Bridge / cross-chain swap / move tokens between chains; bridge quote / fee comparison; supported bridges; track cross-chain arrival | bridge |
| Limit order: buy dip / take profit / stop loss / buy above; cancel / list / resume limit (strategy) orders | strategy |
| Broadcast a signed / raw tx; estimate gas price / gas-limit; simulate a tx; track a broadcast order | gateway |
A given public address's balance / holdings / total value (0xAbc… / a Solana address) | portfolio |
| Token / honeypot safety; DApp / URL phishing; tx or signature pre-check; check / list / revoke token approvals (ERC-20 / Permit2) | security |
| Export / locate audit log, view command history | audit-log |
Pre-flight Checks
At the start of each thread, complete the checks in _shared/preflight.md.
Build the Command
- Read the matched row's linked file first (per the Intent Routing table) — it carries the flow and the commands you need. Never guess subcommand, flag, or file names.
- Learn exact syntax from the CLI, not from memory. Run
onchainos --help for command groups and onchainos <group> <subcommand> --help for exact flags and defaults. Load the matched domain's -cli-reference.md only when its return-field schema or examples are needed.
- Confirm before any state-changing command. Display the prompt, get an explicit affirmative, and follow the Confirming Response rule below. For native BTC, direct BRC-20, and SUI transfers, follow the chain-specific confirmation flow; a BRC-20 transfer inscription confirms before signing and broadcast.
Chain Name Support
--chain accepts numeric chain IDs and human-readable names. Resolution rules and the supported-chain matrix live in _shared/chain-support.md. If <100% confident of a chain name, run onchainos wallet chains.
Confirming Response
Some state-changing commands return confirming (exit code 2) when the backend needs user confirmation. The response carries message (prompt to show) and next (what to do after they confirm).
- Display
message and ask for confirmation.
- Confirms → immediately follow
next (usually: re-run the same command with --force appended).
- Declines → do NOT proceed; tell the user it was cancelled.
Never pass --force on the FIRST invocation of a state-changing command. Add --force only after all of: (1) you ran the command once without it, (2) the CLI returned a Confirming response (exit code 2, "confirming": true), (3) you displayed message and the user explicitly confirmed.
Amount Display Rules
- Token amounts in UI units (
1.5 ETH), never base units.
- USD values with 2 decimal places; if
< 0.01, show full precision.
- Large amounts in shorthand (
$1.2M, $340K); sort holdings by USD value descending.
- In balance/holdings displays, show the abbreviated contract address alongside the symbol (
0x1234...abcd); native tokens with empty tokenAddress → (native).
- Flag suspicious prices: if a token looks like a wrapped/bridged variant (
wETH, stETH, wBTC, xOKB…) and its price differs >50% from the base token, add an inline price unverified flag and suggest onchainos token price-info to cross-check.
Security & Global Notes
- Credential protection: never log, display, or ask for session tokens,
clientId, API keys, private keys, seed phrases, or passwords. Never expose: accessToken, refreshToken, apiKey, secretKey, passphrase, sessionKey, sessionCert, teeId, saTeeId, encryptedSessionSk, signingKey, raw tx data. Show raw accountName (never raw accountId to the user).
- Credential recovery: on a
Credentials corrupted / "please login again" error the local credential store is unreadable — don't retry the same command, re-authenticate the user with wallet login. See wallet-troubleshooting.md.
- Address integrity (funds-loss risk): any on-chain identifier shown to the user (wallet address,
txHash, signature, contract address) MUST be echoed verbatim, character-for-character from the most recent CLI stdout. Never reproduce an identifier from memory, expand an abbreviated form, or re-type it across messages — re-invoke the command that produced it; for a wallet address, use wallet addresses. Never paraphrase, normalize case, insert spaces, or line-break inside an identifier. Always display the full txHash.
- No address hallucination: never fabricate a contract address — malicious tokens clone legitimate names. Only use addresses from a token lookup or the user's explicit input.
- Recipient validation: EVM
0x-prefixed, 42 chars; Solana Base58, 32–44 chars. Validate before sending.
- Transaction simulation: the CLI runs pre-execution simulation; if
executeResult is false → show executeErrorMsg, do NOT broadcast.
- Risk action priority:
block > warn > empty. Top-level action = highest priority from riskItemDetail. An empty action means only that no risk was detected within the checks performed; it is not proof that the asset, DApp, signature, or transaction is safe.
- CLI-classified risk verdicts: the CLI returns the risk verdict as fields — : read them; : recompute from raw / / client-side, since the CLI owns the matrix and hand-derived rules drift from it. → per-token ( / / / ) plus top-level (severity > > > ). / → per-route ( / / ) plus . The CLI only classifies; you decide the interaction: halt on , require explicit yes/no on , and surface the and ask on . For , , or an empty action.
