bingx-swap-account
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for read-only access to account data via official BingX API endpoints. It uses standard HMAC-SHA256 authentication and does not contain any malicious code, obfuscation, or unauthorized data access patterns.
- [PROMPT_INJECTION]: Analysis of indirect prompt injection surfaces shows that the skill ingests data from the BingX API (e.g., fund flow information).
- Ingestion points: Data is received from
open-api.bingx.comendpoints in theincomeandpositionsendpoints. - Boundary markers: Not explicitly defined in the instructions; data is directly displayed in tables.
- Capability inventory: The skill uses
fetchfor API requests and the documentation mentionsfs.writeFileSyncfor handling binary exports. - Sanitization: No specific sanitization of API response text is implemented. However, as the source is the user's own account data from a verified exchange, this represents a low-risk architectural characteristic rather than a vulnerability.
Audit Metadata