Security audit

Crypto Sniping

Security checks across malware telemetry and agentic risk

Overview

This is a real Binance trading bot, and while its behavior matches that purpose, live trading can affect real funds without strong confirmation safeguards.

Review the code and configuration before installing. Use Binance keys with withdrawals disabled and the narrowest permissions possible, start in paper/read-only mode, verify symbols, position size, loss limits, and Telegram destination, and do not enable live mode unless you accept automated real-money trading risk.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Intent-Code Divergence

Medium

Confidence: 86% confidence
Finding: The help text says scan mode performs no trading, yet the code constructs TradingBot before checking CLI flags, which initializes BinanceClient, Trader, and other components. If those constructors perform live connectivity, account loading, or side effects, users may trigger unintended interaction with exchange infrastructure despite selecting a supposedly safe mode.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The README shows a `--live` command immediately after test mode but does not explicitly warn that live mode can place real exchange orders and directly alter the user's funds and positions. In a trading bot context, this omission materially increases the risk of accidental real-money trading, especially for users skimming quick-start steps or assuming a dry-run by default.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The client exposes direct order placement and cancellation methods that can execute irreversible financial actions immediately, with no built-in confirmation, policy guardrails, dry-run mode, or trading-permission separation. In an agent or skill context, these methods materially increase risk because any prompt injection, logic bug, or unintended tool invocation could trigger real trades or cancellations against a live Binance account.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: In the main loop, signals with confidence >= 4 are automatically executed without any explicit user confirmation, dry-run gate, or startup acknowledgement beyond config-driven mode. In a trading skill context, that increases the risk of unintended financial transactions if the bot is misconfigured, started in live mode accidentally, or fed bad signals.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The code can submit real market orders whenever `paper_mode` is false, but this file has no explicit user confirmation, interlock, or acknowledgement before live execution. In an automated trading context, that creates a meaningful safety risk: bad signals, configuration mistakes, or unintended invocation can directly trigger irreversible financial transactions.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.