binance-spot-websocket-skill
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
uxccommand-line utility to manage WebSocket subscriptions to Binance market streams. Instructions inSKILL.mdandreferences/usage-patterns.mddemonstrate how to use commands likeuxc subscribe startanduxc subscribe stop.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes real-time market data from external Binance WebSocket streams, creating a theoretical surface for indirect prompt injection if the agent interprets data payloads as instructions.\n - Ingestion points: Market data is received from the public endpoint
wss://stream.binance.com:443.\n - Boundary markers: The skill recommends using the NDJSON output format to facilitate automated parsing of the JSON envelope.\n
- Capability inventory: The agent uses
uxcfor managing subscriptions andtailfor inspecting localized sink data files.\n - Sanitization: The skill assumes market data follows standard schemas and does not specify explicit sanitization steps for the received payloads.
Audit Metadata