bingx-spot-trade
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly mandates a human-in-the-loop confirmation step ('CONFIRM') for all write operations (placing or cancelling orders) in the live production environment, effectively preventing unauthorized or autonomous trade execution.- [SAFE]: Input validation logic is implemented both in the agent instructions and the provided fetchSigned function, rejecting parameters that contain special characters often used in injection attacks (e.g., &, =, ?, #, or newlines).- [SAFE]: All network operations are directed to legitimate BingX API domains (bingx.com, bingx.pro), which are consistent with the vendor identity ('BingX-API') and the skill's stated purpose.- [SAFE]: Authentication is handled via standard HMAC-SHA256 signing of request parameters with user-provided API keys, following industry best practices for financial API security.
Audit Metadata