bingx-coinm-trade
Warn
Audited by Snyk on Apr 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading integration for BingX Coin‑M perpetual futures with authenticated, signed endpoints for placing and cancelling orders, closing positions, setting leverage/margin, and adjusting position margin. It includes concrete API paths (e.g., POST /openApi/cswap/v1/trade/order, DELETE /openApi/cswap/v1/trade/cancelOrder, POST /openApi/cswap/v1/trade/leverage, POST /openApi/cswap/v1/trade/positionMargin), required HMAC SHA256 signing (fetchSigned) and API keys, and example calls that execute market/limit/stop/take‑profit orders. These are specific market-order / crypto trading operations (i.e., moving/executing financial transactions), not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata