bingx-copytrade-swap
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a detailed TypeScript implementation (the
fetchSignedfunction) that executes network requests to external BingX API endpoints using thefetchAPI. - [EXTERNAL_DOWNLOADS]: The skill requires the
json-bigintNode.js package to correctly parse high-precision integers returned by the trading platform's API. - [DATA_EXFILTRATION]: The skill transmits trading parameters, API keys, and cryptographic signatures to official BingX infrastructure (open-api.bingx.com and open-api.bingx.pro) as part of its core functionality.
- [PROMPT_INJECTION]: The documentation contains strict instructions and constraints for the AI agent to follow specific code patterns and validation rules, designed to ensure the integrity of the signing process and prevent unauthorized parameter manipulation.
Audit Metadata