spot

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN overall in provenance and data flow: the skill is coherent with its stated Binance Spot API purpose and routes credentials only to official Binance endpoints. Its main security concern is high-impact capability: it enables authenticated trading and recommends local plaintext credential storage, so operational risk is high even without signs of malware or deceptive behavior.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Mar 23, 2026, 10:24 AM
Package URL
pkg:socket/skills-sh/binance%2Fbinance-skills-hub%2Fspot%2F@325156a63db21b59d4a25840ecfc6109bf904ef5