bingx-dynamic-sl-tp

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust safety confirmation mechanism in SKILL.md (Step 4 and Agent Interaction Rules), requiring explicit 'CONFIRM' input from the user before placing or canceling any orders on live accounts.
  • [COMMAND_EXECUTION]: Executes a local Python script (scripts/calculator.py) to perform technical analysis calculations (ATR, Bollinger Bands). This is a standard and safe implementation for local data processing.
  • [DATA_EXFILTRATION]: Performs network requests to official BingX API domains (open-api.bingx.com, open-api.bingx.pro) for market data and trade execution. All domains match the vendor's known infrastructure and are documented in the API reference.
  • [EXTERNAL_DOWNLOADS]: Declares standard, well-known Python dependencies (pandas, pandas-ta-classic) in scripts/requirements.txt for technical analysis. These are recognized industry-standard libraries.
  • [SAFE]: The TypeScript helper included in SKILL.md includes a validateParams function that prevents common injection attacks into URL query strings by checking for forbidden characters like &, =, and ?.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 03:46 PM
Security Audit — agent-trust-hub — bingx-dynamic-sl-tp