bingx-dynamic-sl-tp
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes a local Python script (
scripts/calculator.py) usingpython3to calculate trading levels. The execution follows a static template and uses parameters extracted from user intent. - [INDIRECT_PROMPT_INJECTION]: The skill ingests market data via the
--klinesargument (ingestion point: scripts/calculator.py). While boundary markers such as user confirmation are present, the skill possesses the capability to place orders viafetchSigned. Sanitization is performed through numeric conversion and strict parameter validation. - [DATA_EXPOSURE]: The skill uses API secrets for signing. It correctly manages these by passing them as arguments to a signing function rather than hardcoding them.
- [SAFE]: All external references and dependencies are associated with the verified vendor (BingX) or well-known public libraries.
Audit Metadata