Binance Crypto Price

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  1.0.3

Overview

This is a straightforward cryptocurrency price lookup skill that contacts Binance and does not access credentials or modify data.

Install if you are comfortable with a small Python script contacting Binance to fetch public market prices. Avoid entering private or unrelated text as the symbol, and consider pinning dependencies in stricter environments.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill documents and directs use of a script that performs outbound network access to the Binance API, but the skill declares no permissions. This creates a transparency and policy gap: users or hosting systems may treat the skill as lower-risk than it actually is, reducing informed consent and weakening sandboxing or review controls.

VirusTotal

66/66 vendors flagged this skill as clean.