bingx-coinm-market
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates public, read-only market data queries to official BingX API domains. These endpoints do not require authentication keys or access to sensitive user data, and the skill does not request or handle such information.
- [SAFE]: The provided
coinmMarkethelper function implements standard resilience patterns, including a domain fallback mechanism and appropriate timeouts. It correctly usesjson-bigintto ensure numerical precision for large cryptocurrency values, which is a common requirement in financial applications. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured data (JSON) from external API responses. It mitigates potential injection risks by explicitly instructing the agent to validate all user-supplied parameters against strict patterns, regex, and enums, while rejecting special characters before the API call is initiated.
- [EXTERNAL_DOWNLOADS]: The skill references the
json-bigintlibrary, which is a standard and necessary utility for handling large integers in JavaScript environments. All network requests are directed to the vendor's official infrastructure.
Audit Metadata