simple-earn
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates a credential masking policy that restricts the display of API and Secret keys to partial characters, preventing full token exposure in the interaction logs.
- [SAFE]: All API interactions are directed to the official and verified Binance domain (api.binance.com), consistent with the skill's stated purpose.
- [SAFE]: A mandatory manual confirmation step (typing 'CONFIRM') is required for any transaction executed on the Binance mainnet, providing a safeguard against unintended financial activity.
- [SAFE]: The request signing process includes a mandatory percent-encoding step for all parameters, which effectively mitigates command injection risks when the agent utilizes shell-based tools like openssl for HMAC or RSA signatures.
- [SAFE]: The skill includes comprehensive documentation on secure credential management, advising users to utilize IP whitelists and avoid disclosing secret key locations to third parties.
- [SAFE]: Data ingestion occurs via authenticated calls to the vendor's own API, and the processing logic does not expose the agent to untrusted external instruction injection.
Audit Metadata