binance-prediction-updown

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/updown.py to execute the baw (Binance Agentic Wallet) CLI for trading operations such as placing orders and checking positions. The commands are constructed as lists of arguments without using a shell environment, which is a secure practice to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: The skill connects to the official Binance market data API (api.binance.com) to fetch price data (klines) for its trading logic and backtesting harnesses. These connections target a well-known service associated with the skill's stated purpose.
  • [DATA_EXPOSURE]: The skill manages configuration, logs, and state information locally in the ~/.local/updown directory. No sensitive system or user data (such as SSH keys or environment secrets) is accessed or exfiltrated.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:22 PM