mexc-futures
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill adheres to security best practices by requiring exchange credentials (MEXC_API_KEY, MEXC_API_SECRET) to be provided via environment variables, avoiding hardcoded secrets.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests market data from the MEXC API and user-provided command arguments. This surface is necessary for its primary trading purpose and includes appropriate input sanitization.\n
- Ingestion points: User input for symbols and trade volumes in index.ts; market prices, funding rates, and account positions fetched from the MEXC API.\n
- Boundary markers: None identified in command output strings.\n
- Capability inventory: Authenticated network communications with the MEXC API for trade execution and data retrieval; local database writes for maintaining trade history.\n
- Sanitization: Symbols are converted to uppercase, and volume/leverage inputs are strictly validated using numeric parsing logic.
Audit Metadata