Security audit

KuCoin Trader

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real KuCoin trading skill, but it gives an agent live exchange-trading authority with weak safeguards.

Install only if you intentionally want agent-accessible live KuCoin account control. Use restricted API keys, disable withdrawals unless absolutely needed, apply IP restrictions where possible, prefer read-only keys for balance/order queries, and require manual confirmation outside the skill before any transfer, borrow, repayment, leverage change, cancellation, or trade.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (14)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill declares no explicit permissions even though its documentation clearly indicates access to environment-stored credentials and outbound network use to a live exchange API. That mismatch weakens platform trust boundaries and can cause the agent or user to invoke a financially sensitive skill without understanding its real capabilities.

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The script creates a predictable credentials directory in the user's home folder and explicitly instructs the user to place KuCoin API secrets in a plaintext JSON file there. For a trading skill handling exchange credentials, this increases the risk of secret disclosure through local compromise, backups, weak file permissions, or other tools reading from that path.

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The description is broad enough to match common requests like checking balances, transfers, and portfolio management, which increases the chance the skill is auto-selected in ordinary financial conversations. Because this skill can perform real exchange operations, loose trigger wording materially raises the risk of unintended invocation of high-impact actions.

Missing User Warnings

High

Confidence: 95% confidence
Finding: The documentation presents commands for transfers, spot trades, margin borrowing/repayment, futures trading, leverage changes, and order cancellation as routine usage without clearly warning that they are live, irreversible, and financially risky operations. In this context, an agent or user may treat examples as safe demonstrations and accidentally execute real account actions that can cause immediate loss of funds, liquidation risk, or unwanted asset movement.

Missing User Warnings

High

Confidence: 86% confidence
Finding: This file exposes direct methods for transfers, spot/margin/futures order placement, borrowing, repayment, leverage changes, and cancellations with no built-in safety rails such as confirmation gates, policy checks, dry-run support, amount limits, or account-mode restrictions. In an agent skill context, that is dangerous because any prompt injection, agent misinterpretation, or unintended tool invocation could trigger irreversible financial actions on a live exchange account.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: This code executes live futures trades and can also change leverage immediately based only on CLI parameters, with no confirmation step, dry-run mode, or explicit risk acknowledgement. In a trading skill, that is dangerous because a mistaken command, malformed automation input, or prompt/agent error can directly create leveraged market exposure and potentially cause rapid financial loss.

Missing User Warnings

Medium

Confidence: 81% confidence
Finding: Order cancellation is a destructive action that is performed immediately once an orderId is provided, without any confirmation or safeguard. In an automated trading context, accidental or manipulated cancellation can disrupt execution strategy, remove protective orders, or expose positions to unmanaged risk.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The borrow and repay paths submit live margin operations immediately once parameters are provided, with no confirmation prompt, dry-run mode, or explicit warning that real account actions will occur. In a trading skill that directly controls exchange accounts, this increases the chance of accidental debt creation or unintended repayment caused by user error, automation mistakes, or prompt/argument manipulation.

Missing User Warnings

High

Confidence: 95% confidence
Finding: This code places live margin orders directly against the account and can also change leverage before ordering, without any confirmation or mandatory acknowledgment. In the context of a KuCoin trading skill, accidental or manipulated invocation can create immediate financial exposure, leveraged losses, and liquidation risk, making the missing safety gate materially dangerous.

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: Order cancellation is a live state-changing action that executes immediately once an orderId is supplied, with no confirmation or review step. While less severe than placing leveraged trades, accidental cancellation can disrupt trading strategy, remove protective orders, or expose positions to unmanaged market risk.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The isolated borrow/repay functions perform real account operations immediately and derive the currency from the trading pair without any confirmation or explicit risk disclosure. Because these are live leveraged account actions, mistakes in symbol or amount can create or repay debt in the wrong context and directly affect account exposure.

Missing User Warnings

High

Confidence: 97% confidence
Finding: This path submits live isolated margin orders with 'autoBorrow: true', meaning a simple trade request can both create debt and open a leveraged position without any confirmation barrier. In a real-exchange trading skill, that combination substantially increases the danger of accidental execution, prompt-injection-driven misuse by an upstream agent, and rapid financial loss or liquidation.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill exposes high-risk capabilities including asset transfers, spot trading, margin trading, and futures trading, but provides no user-facing warning, confirmation language, or indication of irreversible financial consequences. In an agent setting, this increases the chance of accidental or misunderstood execution of real-money actions, especially because the triggers are broad and natural-language based.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill declares use of sensitive KuCoin API credentials, including API key, secret, and passphrase, without any warning about secure storage, least-privilege scopes, or the risks of granting trading and transfer permissions. If users supply powerful keys without guidance, compromise or misuse could enable unauthorized trades, transfers, or account takeover-like abuse within the exchange permissions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.