bingx-trade-review
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes provided Python scripts (
review.py,tags.py) to perform statistical calculations and generate performance visualizations from trade data. This is a standard architectural choice for data-heavy analysis tasks. - [EXTERNAL_DOWNLOADS]: Declares dependencies on established Python packages (
pandas,matplotlib,numpy) for data processing and chart generation. - [DATA_EXFILTRATION]: Accesses the local file path
~/.bingx-skills/trade-review/trades.jsonto store user trade reflections and strategy tags. This local storage is consistent with the skill's purpose as a private trading journal and does not involve unauthorized external transmission. - [PROMPT_INJECTION]: The skill ingests external data from BingX API responses and local user-authored reflections. Although no explicit instruction boundary markers are defined in the ingestion chain, the risk is negligible as the skill only performs mathematical analysis and local visualization without access to sensitive system resources or high-privilege commands.
Audit Metadata