Binance API

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Binance Spot API helper that uses sensitive trading credentials and local operational memory, but the artifacts disclose those behaviors and require testnet-first use plus explicit confirmation before production orders.

Install only if you intend to let the agent help with Binance Spot workflows. Use testnet first, restrict API-key permissions, never paste secrets into chat, require explicit confirmation before any production order, and periodically review the local ~/binance memory files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used with production keys, the agent can help submit real Binance Spot orders after confirmation.

Why it was flagged

The skill documents a path from test orders to real production order placement, which is high-impact, but it explicitly requires user confirmation.

Skill content
Replace `/api/v3/order/test` with `/api/v3/order` only after user confirmation for production activity.
Recommendation

Keep testnet as the default, require clear per-order confirmation for production trades, and review symbol, side, quantity, price, and account before execution.

What this means

A Binance API key with trading permissions can read account data and place or manage orders.

Why it was flagged

The skill needs Binance credentials for signed account and trading endpoints; this is expected for the purpose and is disclosed.

Skill content
`BINANCE_API_KEY` and `BINANCE_API_SECRET` for signed Spot requests
Recommendation

Use least-privilege API keys, prefer testnet keys during setup, enable IP restrictions if available, and never paste secrets into chat or repository files.

What this means

Local memory may contain sensitive trading preferences, symbols, incidents, and workflow history, and future sessions may rely on it.

Why it was flagged

The skill stores persistent operating mode, action scope, symbols, and inferred preferences that can influence future Binance workflows.

Skill content
`~/binance/memory.md` ... `Allowed actions: market-data | account-read | trading` ... `Stable user preferences inferred from behavior`
Recommendation

Keep secrets out of these files, periodically review or delete ~/binance contents, and confirm that stored defaults still match your intended trading limits.