binance-tokenized-securities-info
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill defines network requests to the author's official domains, binance.com and bin.bnbstatic.com, for retrieving financial data, market status, and company metadata. These operations are consistent with the skill's stated purpose of providing Binance Web3 market information.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses which may contain untrusted strings, such as company descriptions or market status reason messages.
- Ingestion points: Data is ingested from multiple Binance public API endpoints (Token List, Meta, Dynamic V2, etc.) and displayed to the user or processed by the agent.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are present in the skill definition.
- Capability inventory: The skill performs HTTP GET requests to fetch data; it does not have file-writing or subprocess-execution capabilities.
- Sanitization: The skill does not describe any specific validation or filtering of the content returned by the APIs.
- [NO_CODE]: The skill consists solely of a markdown specification for API interactions and does not include any executable scripts, binaries, or logic configurations that could pose a runtime execution risk.
Audit Metadata