BTC Signals Pro

• Outcome: Review
• Latest audit: Sep 12, 2026 · 1:14 AM UTC
• Version: 1.0.3

Overview

The skill is a coherent Bitcoin market-data integration, but it gives detailed automated trading instructions that could lead an agent to open, modify, or close financial positions without strong user-control guardrails.

Review this carefully before installing. It appears to query a disclosed paid BTC Signals Pro API, but its instructions are aggressive financial decision support. Do not connect it to exchange, broker, wallet, or order-placement tools unless you have intentionally enabled trading automation and require explicit confirmation for every order, modification, or close action.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (26)

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The skill includes detailed automated trading bot patterns that direct position entry, sizing, stop management, and forced liquidation behavior, but it lacks strong warnings, consent gates, or restrictions around automated order execution. This is dangerous because an agent could translate these instructions into real trading actions that create immediate financial loss or unintended market exposure for the user.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The README encourages broad, natural-language requests for sensitive trading actions like generating trade setups, market timing, and liquidation analysis without defining clear invocation boundaries or guardrails. In an agent setting, this can cause the skill to be triggered too broadly, leading to unintended use in higher-risk financial decision workflows or automated trading contexts beyond what the author likely intended.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill activates on very broad prompts like general Bitcoin market or trading questions, which can cause it to engage in sensitive financial decision support without clear user intent or safety gating. In an agent ecosystem, this increases the chance of unrequested trading guidance, excessive external API use, and accidental escalation into high-risk financial workflows.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 45)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 99)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 103)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 107)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 115)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 123)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 131)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 135)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 143)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 147)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 151)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 155)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 159)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-reference.md (reported line 3)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-reference.md (reported line 256)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-reference.md (reported line 564)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-reference.md (reported line 568)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-reference.md (reported line 661)May include surrounding context.

md

# BTC Signals Pro API Reference

**Base URL:** `https://api.btcsignals.pro/v1`
**Authentication:** `X-API-Key: <your-api-key>` header on all requests
**Rate Limit:** 60 requests/minute

Static analysis

No suspicious patterns detected.