skills/binance/binance-skills-hub/vip-loan/Socket

vip-loan

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill is purpose-aligned and sends data to Binance's official API, so it is not overtly malicious. However, it enables real-world financial actions and instructs the agent to ingest and persist raw Binance API secrets in TOOLS.md, creating substantial credential-handling and account-abuse risk.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Mar 20, 2026, 09:51 AM

Package URL

pkg:socket/skills-sh/binance%2Fbinance-skills-hub%2Fvip-loan%2F@3a129e54e6af17424337433a50dded93d2439920