Security audit

Binance Stat Arb Monitor

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Binance market-signal monitor that fetches public data, writes local signal files, and optionally sends alerts, with no hidden trading or data exfiltration found.

Install in a virtual environment, pin or audit dependencies before long-term use, keep Telegram/Feishu tokens private, and treat generated trade signals as informational rather than automated financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 python-dateutil>=2.8.0
Confidence: 94% confidence
Finding: The dependency is specified with only a lower bound, so builds may resolve to different versions over time and can unexpectedly pull in a newly introduced vulnerable or breaking release. In a monitoring and alerting skill that depends on network libraries, non-reproducible installs increase supply-chain risk and make security patch validation harder.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 python-dateutil>=2.8.0
Confidence: 89% confidence
Finding: python-dateutil is also unpinned, which makes installations non-reproducible and can introduce unexpected vulnerable or incompatible versions in future deployments. This is a supply-chain hygiene issue rather than an immediately exploitable flaw by itself, but it weakens dependency control.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

Category: Supply Chain
Confidence: 97% confidence
Finding: The requirement allows requests>=2.28.0, which includes versions affected by multiple published advisories; because there is no upper bound or exact pin, an environment could resolve to a vulnerable release. Given this skill fetches remote market data and may send notifications to external services, flaws in the HTTP client can expose credentials, weaken TLS/request verification, or leak sensitive connection metadata.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.