v0.1.2

Bingx Announcement

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:41 AM.

Analysis

This instruction-only skill makes read-only BingX announcement lookups and requests no credentials or local access, with minor notes about external API calls and limited provenance.

GuidanceBefore installing, confirm you are comfortable with the agent making read-only requests to BingX public API domains. No API keys, login, local files, or background persistence are requested; independently verify announcements before making trading or account decisions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

SKILL.md

All requests are **read-only**; no CONFIRM required.

The skill explicitly allows no-confirm external API requests. This is purpose-aligned because the documented endpoint is a public read-only announcement lookup.

User impactWhen used, the agent may send the selected announcement filters, language, and page number to BingX and return the public results.

RecommendationInstall if you are comfortable with read-only BingX API lookups; review returned links and announcements before acting on them.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceMediumStatusNote

metadata

Source: unknown
Homepage: none

The registry metadata does not provide an upstream source or homepage. Because this is instruction-only with no install code, this is a provenance note rather than a security concern.

User impactIt is harder to independently verify the publisher or documentation origin from the supplied metadata.

RecommendationIf provenance matters, compare the endpoint and parameters against BingX official documentation before relying on the skill.