Skills
Navigate
skills/bingx-api/api-ai-skills/bingx-agent/Gen Agent Trust Hub

bingx-agent

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external BingX API responses, which constitutes an attack surface for potential indirect prompt injection if API fields contain malicious instructions.
  • Ingestion points: API responses from open-api.bingx.com and open-api.bingx.pro described in SKILL.md.
  • Boundary markers: No specific output delimiters or instructions are provided to the agent for handling the data returned by the API.
  • Capability inventory: The skill uses the fetch API in SKILL.md to perform network operations.
  • Sanitization: Input parameters are validated using a regular expression in the validateParams function within SKILL.md to prevent injection via special characters like & and =.
  • [SAFE]: The skill follows security best practices by requiring authenticated requests and implementing input sanitization. All network requests are directed to official vendor-controlled domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 10:52 AM