derivatives-trading-options

SUSPICIOUS: The skill’s API scope matches its Binance trading purpose and it uses official Binance endpoints, so there is no strong sign of credential harvesting or malware. However, it enables autonomous financial actions and instructs the agent to read/store raw API credentials in plaintext files, which is a significant security risk for an AI skill even with masking guidance and a mainnet confirmation step.