Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - src/index.cjs
Security audit
Shadow Binance Bot
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed read-only Binance trading-history analyzer that uses API credentials for the expected purpose and shows no evidence of trading, withdrawal, persistence, or hidden data transfer.
Install only with Binance API keys restricted to read-only permissions, disabled trading and withdrawals, and preferably IP restrictions. Expect the tool to contact Binance and display sensitive balances and trading history locally in the console.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (10)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - src/binance.cjs
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - src/shadowSim.cjs
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - src/coach.cjs
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - tests/analyzer.test.cjs
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - tests/shadowSim.test.cjs
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - tests/binance.test.cjs
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
This file performs authenticated HTTPS requests to Binance endpoints using API keys and returns sensitive financial account data such as balances, income history, and trade history. While the code has technical comments, it lacks any user-facing confirmation prompt or explicit warning that account data will be sent to an external service.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
This code uses API credentials and then connects to Binance, fetches balances, and retrieves futures/spot trading history. While it logs operational progress, it does not clearly disclose to the user that real account portfolio and transaction data will be sent to Binance APIs when real credentials are present.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
This code file analyzes income events from Binance, including realized PnL, commissions, funding, timestamps, and daily/hourly trading behavior. Although it does not transmit or delete data, it handles sensitive financial-trading records and there is no confirmation prompt, warning comment, or user-facing disclosure in this file about that sensitivity.
- Content
Static analysis
No suspicious patterns detected.