bingx-maker-entry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls BingX’s public order-book endpoint (GET /openApi/swap/v2/quote/depth) and ingests the returned JSON (bids/asks) into the agent/LLM context for planning, which is outsider-authored free text/data fetched at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute trades on the BingX exchange. It includes authenticated endpoints and code to sign requests (fetchSigned) and calls for placing limit orders (POST /openApi/swap/v2/trade/order), canceling orders (DELETE /openApi/swap/v2/trade/order), and managing order execution/monitoring. These are specific financial execution APIs (order placement/cancellation) that can move funds/positions, so it grants direct financial execution authority.