ClawHub
Back to skill

Security audit

Binance Pro Cn

Security checks for vulnerabilities and agentic risk

Overview

This Binance skill matches its trading purpose, but it can guide an agent to place real trades and change leverage without enough built-in guardrails.

Review carefully before installing. Use only a dedicated Binance API key with withdrawals disabled, minimal trading permissions, and IP restrictions where possible. Prefer testnet or tiny amounts first, and require explicit confirmation for every order, cancellation, and leverage change.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

High
Confidence
95% confidence
Finding
The trigger phrases include generic terms like '交易' and 'trading', which are broad enough to activate in many unrelated conversations. In a skill capable of placing live exchange orders, over-broad activation materially increases the chance of accidental invocation and unintended financial actions.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill presents leveraged futures, spot orders, and account operations up front without an immediate warning that trades can cause irreversible losses and execute on real funds. For a financial skill with market-order and leverage examples, omission of prominent risk disclosure makes accidental or uninformed use substantially more dangerous.

External Transmission

Medium
Category
Data Exfiltration
Content
QUERY="symbol=${SYMBOL}&side=BUY&type=MARKET&quantity=${QUANTITY}&timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://api.binance.com/api/v3/order?${QUERY}&signature=${SIGNATURE}" \
  -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'
```
Confidence
93% confidence
Finding
This code sends authenticated POST requests that can execute live market buy orders on a real Binance account. In the context of broad triggers and limited upfront warnings, enabling direct order placement via simple examples substantially raises the risk of unintended or unsafe financial transactions.

External Transmission

Medium
Category
Data Exfiltration
Content
QUERY="symbol=${SYMBOL}&side=SELL&type=MARKET&quantity=${QUANTITY}&timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://api.binance.com/api/v3/order?${QUERY}&signature=${SIGNATURE}" \
  -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'
```
Confidence
93% confidence
Finding
This endpoint performs authenticated live market sell orders, which can immediately liquidate assets or close exposure without recovery once executed. Given the skill's broad activation terms and direct execution examples, this network action is dangerous in context even though the destination is the intended exchange.

Static analysis

No suspicious patterns detected.