Binance Trade Jury

• Analyzed: May 11, 2026, 6:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: 8d6938846b70859883804dfd9de29a73a0e4a75f04a64053be754a89a50b5fe6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a potential shell injection vulnerability in the `curl` command template provided in `SKILL.md`. The instructions direct the agent to insert user-provided strings (symbol, side, and thesis) directly into a shell command sent to an external API (binance-trade-jury.vercel.app), which could be exploited if the agent does not properly sanitize the input. While the functionality aligns with the stated purpose of trade analysis, the insecure handling of user data and reliance on a third-party endpoint present a security risk.