binance-futures
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No signs of malicious patterns, obfuscation, or unauthorized data exfiltration were found in the analyzed files.
- [CREDENTIALS_UNSAFE]: The skill utilizes environment variables (
BINANCE_API_KEYandBINANCE_API_SECRET) for sensitive credential management, which is the recommended secure practice for AI agent skills. - [COMMAND_EXECUTION]: The skill translates user inputs into trading operations (orders, leverage adjustments) via internal exchange modules. These are functional capabilities required for its primary purpose and are executed only upon explicit user request.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external market data (symbols, prices, funding rates). The risk is low as the data is treated as structured information for display and logging.
- Ingestion points: Market data fetched from the Binance API in
index.ts(e.g.,bf.getPrice,bf.getFundingRate). - Boundary markers: Data is isolated within formatted strings and tables in the command responses.
- Capability inventory: Financial operations including opening/closing positions and modifying leverage.
- Sanitization: Input symbols are normalized to uppercase, and numerical values for size and leverage are strictly parsed and validated before being passed to the exchange module.
Audit Metadata