bingx-coinm-trade

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN. The skill’s capabilities, credentials, and network destinations are internally consistent with a BingX Coin-M trading integration, and data flows go to official BingX endpoints rather than third-party collectors. Main risk comes from enabling real-money trading actions and transitive skill installation, but there is no strong sign of malware, covert exfiltration, or mismatched capability.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Sep 17, 2026, 04:58 PM
Package URL
pkg:socket/skills-sh/bingx-api%2Fapi-ai-skills%2Fbingx-coinm-trade%2F@9e27b82447c665dd6c4ddc91a099f129835b1c1a68fa68330a13646d9caa38be
Security Audit — socket — bingx-coinm-trade