derivatives-trading-coin-futures

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill requires the agent to use user-provided apiKey and secretKey to sign requests and include the X-MBX-APIKEY header (and likely generate signed query strings), which forces the LLM to handle and emit secret values or values derived directly from them in generated requests.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Binance derivatives trading integration and includes authenticated endpoints and parameters for placing, modifying, and cancelling orders, changing leverage/margin, and other trading actions. It requires API key/secret and describes signing requests. These are specific financial execution capabilities (crypto exchange trading / sending transactions via Binance API), not generic tooling. Therefore it grants direct financial execution authority.