Binance Spot Trader

• Analyzed: May 12, 2026, 3:53 AM
• Findings: 1
• Version: 1.0.0
• Hash: 572eea81bf17b03037cb06c5553782bbdc061e0ffbdacc55459dfe66706e850f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'binance-spot-trader' is a legitimate autonomous trading bot. It accesses Binance and Anthropic APIs using provided API keys, which is necessary for its stated functionality. The `SKILL.md` provides clear instructions and critical security warnings, advising users to disable withdrawals, IP-restrict keys, and use sub-accounts. The scripts (`setup.sh`, `portfolio.py`, `trader.py`) perform standard operations like installing dependencies, fetching account data, and placing market orders. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms installed by the skill itself, or prompt injection attempts against the OpenClaw agent or the LLM.