bingx-spot-ws-market
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The TypeScript helper utilizes the 'pako' Node.js package for GZIP decompression, which is a legitimate and standard requirement for processing the compressed data streams provided by the vendor.
- [COMMAND_EXECUTION]: The skill establishes a connection to the official BingX market data WebSocket endpoint (wss://open-api-ws.bingx.com/market) to fetch public information, requiring no sensitive authentication or credentials.
- [PROMPT_INJECTION]: The skill includes robust defensive instructions that require the agent to validate user-supplied parameters against strict regular expressions and enums, and explicitly prohibits the returning of raw code snippets to the user.
Audit Metadata