ClawHub
Back to skill

Security audit

Binance-Hunter

Security checks across malware telemetry and agentic risk

Overview

This skill is openly about Binance trading, but it gives broad live trading and leveraged-account instructions without enough safety scoping for real-money use.

Install only if you intentionally want an agent to help with Binance account operations. Use testnet first, create separate restricted API keys, disable withdrawals, restrict keys by IP where possible, protect the credential file, keep balances limited, and require explicit confirmation before every order, cancellation, leverage change, or other account-modifying command.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Description-Behavior Mismatch

High
Confidence
96% confidence
Finding
The manifest markets the skill as analysis/risk-calculation tooling, but the documentation includes authenticated order placement, leverage changes, order cancellation, and account queries. That scope expansion is dangerous because users may grant API credentials expecting read-only analysis, while the skill context normalizes high-impact account-modifying operations.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill provides ready-to-run commands for destructive financial actions such as market orders, leveraged futures positions, stop/TP placement, leverage changes, and cancellation, without strong upfront risk gating. In this context, the absence of prominent warnings, dry-run guidance, environment separation, and mandatory confirmation materially increases the chance of irreversible financial loss from misuse or misunderstanding.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The credential setup instructions tell users to store exchange API secrets in a local file or environment variables without privacy and least-privilege guidance. In a trading context, exposed Binance API credentials can enable unauthorized balance access, order placement, leverage changes, and other account actions depending on the key permissions.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"version": "1.0.0",
  "description": "Professional Binance trading skill with automated market analysis and risk management.",
  "dependencies": {
    "ccxt": "^4.0.0",
    "pandas": "^2.0.0",
    "ta": "^0.10.0"
  }
Confidence
96% confidence
Finding
"ccxt": "^4.0.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "Professional Binance trading skill with automated market analysis and risk management.",
  "dependencies": {
    "ccxt": "^4.0.0",
    "pandas": "^2.0.0",
    "ta": "^0.10.0"
  }
}
Confidence
96% confidence
Finding
"pandas": "^2.0.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
    "ccxt": "^4.0.0",
    "pandas": "^2.0.0",
    "ta": "^0.10.0"
  }
}
Confidence
95% confidence
Finding
"ta": "^0.10.0"

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.