bingx-copytrade-swap

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a detailed TypeScript implementation (the fetchSigned function) that executes network requests to external BingX API endpoints using the fetch API.
  • [EXTERNAL_DOWNLOADS]: The skill requires the json-bigint Node.js package to correctly parse high-precision integers returned by the trading platform's API.
  • [DATA_EXFILTRATION]: The skill transmits trading parameters, API keys, and cryptographic signatures to official BingX infrastructure (open-api.bingx.com and open-api.bingx.pro) as part of its core functionality.
  • [PROMPT_INJECTION]: The documentation contains strict instructions and constraints for the AI agent to follow specific code patterns and validation rules, designed to ensure the integrity of the signing process and prevent unauthorized parameter manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 02:36 PM