bingx-spot-ws-account
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts solely with official BingX API and WebSocket endpoints (open-api.bingx.com and open-api-ws.bingx.com).
- [SAFE]: The inclusion of a signing helper demonstrates standard cryptographic practices for secure API authentication using HMAC-SHA256.
- [SAFE]: The use of the pako library is appropriate for handling GZIP-compressed data streams typically used by high-performance financial APIs.
- [SAFE]: The skill provides defensive interaction rules that prevent the agent from leaking implementation details or performing unauthorized write actions by restricting responses to natural language summaries.
- [SAFE]: The indirect prompt injection surface presented by processing live WebSocket data is mitigated by strict rules requiring natural-language-only summaries and the trusted nature of the data source.
Audit Metadata