bingx-coinm-trade
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a professional and secure approach to API integration. It includes explicit 'Agent Interaction Rules' that mandate the extraction of structured values from user intent rather than copying raw text, preventing potential injection into API parameters.
- [SAFE]: All write operations on production environments (order placement, cancellation, leverage changes) require an explicit 'CONFIRM' action from the user, providing a critical safety buffer against accidental or malicious trades.
- [SAFE]: The provided code uses standard Node.js cryptographic libraries for HMAC SHA256 signing and includes input sanitization that rejects forbidden characters (like
&,=,?,#) used in URL/parameter injection attacks. - [SAFE]: The network operations target official BingX vendor domains (
bingx.com,bingx.pro) for API communication, which is consistent with the skill's stated purpose and the provided author context. - [SAFE]: The use of
json-bigintis a best-practice requirement for financial APIs to ensure that large integer values (such as order IDs) do not lose precision during JSON parsing.
Audit Metadata