Trading Signal
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a disclosed, instruction-only Binance Web3 market-signal lookup with no code install, credentials, persistence, or account-changing actions, but users should treat the trading signals as informational.
This skill appears safe to install from a security perspective: it is instruction-only and does not request credentials or execute code. Before using it, be comfortable with the agent querying the disclosed Binance Web3 endpoint, verify the skill’s provenance if official affiliation matters to you, and treat any trading signals as informational rather than financial advice.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may contact Binance Web3 to retrieve market-signal data and use that data in responses.
The skill instructs the agent to make a POST request to a disclosed external Binance Web3 endpoint. This is expected for retrieving trading signals and is narrowly scoped, with no credentials or account mutation shown.
https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/web/signal/smart-money
Only use the skill if you are comfortable with the agent querying this external financial-data endpoint; do not add private keys, wallet credentials, or unrelated personal data.
Users have limited registry-provided context for verifying who published the skill or whether it is officially affiliated with the named service.
The registry does not provide a source repository or homepage to verify the publisher or author claim for this financial-data skill. Because there is no executable code or install step, this is a provenance note rather than an execution concern.
Source: unknown; Homepage: none
Verify the endpoint and publisher independently before relying on the data, especially for financial decisions.
The skill’s output could influence trading or investment choices, even though it only retrieves signal data.
The skill frames returned signals as investment-opportunity references, which could cause a user to over-rely on the agent’s output for financial decisions. The artifacts do not show automatic trading or fund movement.
Use this skill when users are looking for investment opportunities — smart money signals can serve as valuable references for potential trades.
Treat the results as informational, verify with independent sources, and do not authorize trades or fund transfers solely based on these signals.