binance
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@binance/binance-clipackage from the npm registry during the setup process to enable its core functionality. - [COMMAND_EXECUTION]: The skill executes financial operations through the
binance-clitool. These include high-impact actions like placing orders and managing withdrawals. - Evidence: Reference files like
references/wallet.mdandreferences/spot.mddocument commands forwithdrawandnew-orderrespectively. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it processes data retrieved from the Binance API. This risk is managed through instructional guardrails requiring human oversight.
- Ingestion points: Market data and account status endpoints documented in reference files like
references/alpha.mdandreferences/spot.md. - Boundary markers: The skill includes a 'Notes' section in
SKILL.mdadvising users to confirm production transactions and provides specific security rules inreferences/auth.md. - Capability inventory: The agent has access to financial operations (trading, withdrawals) and the ability to send signed requests to arbitrary URLs via
binance-cli request. - Sanitization: The skill relies on manual user verification (typing 'CONFIRM') before executing sensitive production actions.
Audit Metadata