Binance Event Contract Risk Manager

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:23 PM UTC
• Version:
  1.0.0

Overview

This is a transparent trading risk-check prompt with no executable code or credential handling, but users should treat it as advisory rather than guaranteed automated protection.

Install only if you want an advisory risk checklist for Binance event-contract trades. Do not assume it will run continuously or block trades automatically unless you separately build and review that automation; verify inputs and require explicit approval before any real trade is placed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill defines activation as continuously validating "every signal before execution" and also allowing manual triggering, but it does not specify which systems, signal sources, or trust boundaries are in scope. In an automated trading context, this ambiguity can cause the risk manager to overreach or fail open, allowing unintended signals to be treated as valid inputs or creating inconsistent enforcement across execution paths.

VirusTotal

64/64 vendors flagged this skill as clean.