Binance Coach

• Analyzed: May 18, 2026, 7:15 AM
• Findings: 1
• Version: 2.1.2
• Hash: 60be8442ddce103580fbfaa685b4098d4f4e3fd1ef9db1584a552c1568905b82
• Source: palm
• External report: View on VirusTotal

Findings (1)

BinanceCoach is a comprehensive crypto trading assistant that integrates Binance portfolio data with AI-driven coaching. It handles sensitive credentials (Binance API keys, Anthropic keys, and Telegram tokens) but follows security best practices by storing them locally in a .env file and providing clear instructions for creating read-only Binance keys. The skill includes a CLI wrapper (bc.sh) with basic shell injection safeguards, a Telegram bot with automated polling, and a setup wizard that requests explicit user consent before modifying the OpenClaw USER.md configuration. No evidence of data exfiltration, malicious execution, or unauthorized persistence was found; the code logic is consistent with its stated purpose of portfolio analysis and market monitoring.