Security audit

Binance Exchange

Security checks for vulnerabilities and agentic risk

Overview

This skill queries public Binance market data and I found no hidden persistence, credential access, trading actions, or destructive behavior.

Install only if you are comfortable with the skill sending market-data queries to Binance and, for most scripts, routing them through a local proxy at 127.0.0.1:1082. It does not use API keys or place trades, but you should verify your proxy configuration and expect dependencies such as curl, jq, and bc.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/change.sh (reported line 6)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/gainers.sh (reported line 5)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/kline.sh (reported line 6)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/price.sh (reported line 6)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/token-info.sh (reported line 33)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/token-info.sh (reported line 49)May include surrounding context.
sh
# Binance Top Gainers (24h) PROXY="-x http://127.0.0.1:1082" BASE_URL="https://api.binance.com/api/v3" SYMBOLS="BTCUSDT ETHUSDT BNBUSDT SOLUSDT XRPUSDT DOGEUSDT ADAUSDT AVAXUSDT LINKUSDT DOTUSDT MATICUSDT LTCUSDT UNIUSDT ATOMUSDT ETCUSDT FILUSDT XLMUSDT APTUSDT ARBUSDT OPUSDT NEARUSDT INJUSDT SUIUSDT TIAUSDT PEPEUSDT WIFUSDT BONKUSDT SHIBUSDT FETUSDT RNDRUSDT GRTUSDT STXUSDT"

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The script emits status and error messages in Chinese string literals, which imposes a specific language on users without any opt-in or documented locale constraint. This is a natural-language policy issue because the file provides no way to select or justify the language used.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The script defines a proxy at L04 and uses curl to send requests to the Binance API at L13, but there is no warning, prompt, or descriptive comment disclosing that it will make external network connections via a local proxy. Users running the script may not realize it depends on and transmits requests through network infrastructure.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: With no manifest available, the script's observable purpose is fetching Binance K-line data as indicated by its header comments. Hard-coding curl to use a local HTTP proxy adds a network-routing capability beyond simply retrieving market data, and that extra capability is not explained or justified by the script's documentation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.