bithumb-withdraw

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @bithumb-official/bithumb-cli package from the official npm registry. This is the legitimate CLI tool provided by the vendor (bithumb-official) for managing Bithumb account operations.
  • [COMMAND_EXECUTION]: The primary function of the skill is to orchestrate the execution of various bithumb CLI commands. It includes robust safety logic, such as a mandatory read-only gate check and a multi-step verification process before any funds are moved.
  • [CREDENTIALS_UNSAFE]: The skill documentation references the use of BITHUMB_ACCESS_KEY and BITHUMB_SECRET_KEY environment variables. This is a standard and recommended practice for managing API credentials for CLI-based tools, avoiding hardcoded secrets within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 02:12 PM
Security Audit — agent-trust-hub — bithumb-withdraw