ClawHub
Back to skill

Security audit

Binance Dca Tool

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Binance DCA helper, but it can place live crypto buy orders and schedule recurring purchases without strong built-in safeguards.

Install only if you intentionally want an agent-accessible Binance trading helper. Use Binance testnet first, create a restricted API key with withdrawals disabled and IP limits where possible, keep order sizes small, avoid unattended recurring jobs unless externally capped, and require explicit confirmation before any live buy.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill clearly instructs use of shell commands (`bash scripts/dca.sh ...`) yet the manifest does not declare the corresponding permission boundary. That mismatch weakens review and runtime safety because users or orchestrators may not realize the skill can execute local commands that interact with live trading credentials and place orders.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The trigger description is broad enough to activate on generic investment or accumulation questions, not just explicit requests to use Binance trading functionality. In context, over-broad routing is risky because this skill can progress from advice-like prompts into shell-based actions and potentially real exchange orders if the agent misfires.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill includes direct instructions to place real market and limit buy orders but does not present a prominent warning that funds are live, trades may execute immediately, and completed crypto transactions can be difficult or impossible to reverse. In a financial-trading context, this omission is more dangerous because a user may treat examples as harmless exploration and trigger real monetary loss.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.