Binance Pro (Hybrid Labs)

• Analyzed: Mar 31, 2026, 4:51 PM
• Findings: 1
• Version: 1.0.0
• Hash: 0fd0bfaf7c341e4872368ae2a2c64a0b4bee79d72ef9f899e99c6438b4d4e829
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a legitimate integration with the Binance API for spot and futures trading, allowing users to manage portfolios and execute trades. It handles API credentials via environment variables or a local JSON file (~/.openclaw/credentials/binance.json) as documented. All network requests in both the Python CLI (binance_cli.py) and the markdown examples (SKILL.md) are directed to official Binance endpoints (api.binance.com and fapi.binance.com), with no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.