assets

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned and sends data to Binance's official API, so it does not look malicious. However, it is high-risk because it handles raw API secrets, stores them in local files, and authorizes real-world financial actions such as withdrawals and transfers.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Mar 24, 2026, 01:35 PM
Package URL
pkg:socket/skills-sh/binance%2Fbinance-skills-hub%2Fassets%2F@c59a46edf8c931fc0f8522b4863136cce7e6f667