Skills
Navigate
skills/binance/binance-skills-hub/binance-onchain-copy-trader/Gen Agent Trust Hub

binance-onchain-copy-trader

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/copytrader.py invokes the baw (Binance Agentic Wallet) CLI using subprocess.run and subprocess.Popen to perform wallet operations and subscribe to data streams.
  • [EXTERNAL_DOWNLOADS]: Fetches token audit and market data from web3.binance.com using urllib.request. This targets the official infrastructure of the vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted market data and trading signals which drive automated monetary decisions.
  • Ingestion points: Real-time trade data and signals from baw tracker ws (scripts/copytrader.py).
  • Boundary markers: Normalization logic in norm_address and norm_signal (scripts/copytrader.py) separates raw external data from internal logic using a fixed dictionary schema.
  • Capability inventory: Monetary order placement via baw market-order swap and baw limit-order sell (scripts/copytrader.py).
  • Sanitization: Strictly enforces numeric types using fnum and sanitizes order parameters using dec and qstr formatting helpers (scripts/copytrader.py).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 12:42 PM
Security Audit — agent-trust-hub — binance-onchain-copy-trader