ClawHub
Back to skill

Security audit

Binance Pro

Security checks across malware telemetry and agentic risk

Overview

This Binance skill appears legitimate, but it deserves review because it can guide an agent to execute real leveraged crypto trades with broad always-on routing and limited safeguards.

Install only if you intentionally want agent assistance with Binance account actions. Use a dedicated Binance API key with withdrawals disabled, minimum permissions, IP restrictions, and small limits; prefer read-only or Binance testnet unless live trading is explicitly needed. Require explicit confirmation before every order, leverage change, cancellation, or position close.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill description claims it can perform 'any Binance operation' and is marked with always=true, which creates an overly broad invocation surface for a tool that can place trades and modify leveraged positions. In an agent setting, ambiguous routing to a financially powerful skill increases the chance of accidental or insufficiently authorized execution of destructive actions.

Missing User Warnings

High
Confidence
97% confidence
Finding
This skill enables spot and futures trading, including leverage up to 125x and market orders, but the upfront description does not prominently warn that actions may cause immediate, irreversible financial loss. Because the skill exposes high-risk trading primitives and even advertises broad operational capability, an agent or user may invoke it without understanding liquidation, slippage, or the finality of submitted orders.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.