p2p
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access behaviors were detected.
- [CREDENTIALS_UNSAFE]: The skill provides clear security guidelines for handling Binance API keys and secrets. It specifically instructs the agent to mask these credentials when communicating with the user and recommends storage in .env files with .gitignore protection.
- [COMMAND_EXECUTION]: Includes standard code snippets for legitimate operations such as UTC timestamp formatting and HMAC-SHA256 request signing using local tools like openssl.
- [EXTERNAL_DOWNLOADS]: Requests are restricted to official Binance endpoints (www.binance.com and api.binance.com) for fetching P2P advertisements, processing order history, and performing version checks. These are verified vendor resources.
Audit Metadata