Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed crypto trading skill, but it can send exchange credentials to an MCP server and place real spot or leveraged futures trades, so it needs careful review before use.
Install only if you deliberately want an agent to trade on real OKX or Binance accounts. Use dedicated trade-only API keys with withdrawals and transfers disabled, enable exchange IP allowlisting where possible, start with demo/testnet or very small balances, verify the MCP endpoint before sending credentials, and require your own explicit confirmation before any order, leverage change, or position close.
method="POST",
)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
body = e.read().decode()67/67 vendors flagged this skill as clean.
No suspicious patterns detected.