algo

What the source does

• FilesystemDeclared3 observations
• NetworkDeclared6 observations
• ShellDeclared1 observation
• DependenciesNot pinnedSome versions float
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.

When the user refers to any of these tokens by name (e.g., "send USDT", "swap BNB to USDT"), use the corresponding address from the following tables. For token names not listed here, use the `query-to

| Token audit | `POST https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit`, body `{binanceChainId, contractAddress, requestId}`. Returns `hasResult` `isSupported` `riskLeve

3. **Icon and report URLs are relative paths — prepend domain to use**: The API returns relative paths for `icon`, `dailyAttestationReports`, and `monthlyAttestationReports` (e.g. `/images/web3-data/p

### Step 1: Gather credentials

Read the `.local.md` file from the same directory as this SKILL.md to load credentials.

1. **Do NOT tell the user the swap succeeded yet.** At most say it has been *submitted* and you are confirming.

- Backtest credit whitelist mechanism (`isWhiteList`) — never tell the user whether they are on a whitelist or what the whitelist differences are.

> **MUST follow:** When `complaintStatus` is 0, 1, or 2 (appeal still active), NEVER tell the user to "go to the app" or "head to the dispute center". Always guide them to use this skill to submit evi

print(f"   api_key:    {'…' + config.get('…', ''…'❌ Not set'}")

console.log(`Usage: BINA…<apiKey> node scripts/save-key.mjs

Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,

.local.md.example

image_bytes = base64.b64decode(base64_data)

requests, opencv-python, pyzbar, Pillow

* Only read credentials explicitly needed for the current task

Scripts read the OpenAPI key in this order:

**Before submitting — confirm you can persist the credentials.** `jobId` + `jobToken` is the only credential that retrieves the report: there is no "list my jobs by address" endpoint, so a lost creden

Audit 0.4.1 · source sha 6a2c72a97319 · 20 Oct 2026Report an issue or request a re-scan

• Publisherbinance GitHub organizationOwner of the repository this skill is read from
• Source folderbinance/binance-skills-hubThe exact folder we audited
• LicenceNot declaredAs the repository states it
• Commit pinned for this verdict6a2c72a97319A new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

---
name: binance-agentic-wallet
description: |
  Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
  swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history,
  wallet settings, daily limit, slippage, MEV protection, supported chains,
  send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer,
  send to .ai Agent ID name,
  prediction market, place prediction, redeem winnings, prediction PnL,
  x402 payment, HTTP 402 Payment Required,
  check/revoke/manage token approvals,
  DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake,
  claim rewards/fees, health factor, APY, TVL,
  sign external transaction, contract call, sign message, EIP-712, developer mode,
  speed up/cancel/replace transaction, pending/stuck transactions,
  gas price, gas fee, network fee, fee levels, gas tiers,
  or any on-chain wallet operation.
metadata:
  author: binance-web3-team
  version: '1.13.0'
  requiredCliVersion: '1.11.0'
  openclaw:
    requires:
      bins:
        - baw
    install:
      - kind: node
        package: '@binance/agentic-wallet'
        bins: [baw]
        label: Install Binance Agentic Wallet CLI (npm)
---

# Binance Agentic Wallet Skill

This skill drives the `baw` CLI to manage a Binance Web3 wallet — sign-in/sign-out, balance and history queries, security settings, token transfers, DEX swaps (market orders), limit orders, order management, prediction market trading, x402 payments, and DeFi operations.

## Command Routing

| User Intent                                                          | Command                               | Reference                                         |
|----------------------------------------------------------------------|---------------------------------------|---------------------------------------------------|
| Campaign / 大赛 / bStock PnL competition; buy/sell a bStock (币股)    | (see reference)                       | [campaign.md](references/campaign.md)             |
| Sign in / connect wallet                                             | `auth signin` → `auth verify`         | [authentication.md](references/authentication.md) |
| Sign out / disconnect wallet                                         | `auth signout`                        | [authentication.md](references/authentication.md) |
| Check if wallet is connected                                         | `wallet status`                       | [wallet-view.md](references/wallet-view.md)       |
| List supported chains / available networks                           | `wallet chains`                       | [wallet-view.md](references/wallet-view.md)       |
| Query gas price / fee levels / network fee                           | `wallet gas-price`                    | [gas.md](references/gas.md)                       |
| Get my wallet address                                                | `wallet address`                      | [wallet-view.md](references/wallet-view.md)       |
| Check token balances                                                 | `wallet balance`                      | [wallet-view.md](references/wallet-view.md)       |
| View transaction history                                             | `wallet tx-history`                   | [wallet-view.md](references/wallet-view.md)       |
| View security settings and remaining daily quota                     | `wallet settings`                     | [wallet-setting.md](references/wallet-setting.md) |
| Check if any transactions are pending or require double-confirmation | `wallet tx-lock`                      | [wallet-view.md](references/wallet-view.md)       |
| Speed up a pending transaction                                       | `wallet speed-up`                     | [speedup-cancel.md](references/speedup-cancel.md) |
| Cancel a pending transaction                                         | `wallet cancel`                       | [speedup-cancel.md](references/speedup-cancel.md) |
| List pending transactions / stuck transactions                       | `wallet tx-history --type pending`    | [speedup-cancel.md](references/speedup-cancel.md) |
| Check wallet approvals / manage token authorizations                  | `approvals list`                      | [approvals.md](references/approvals.md)           |
| View approval details                                                | `approvals detail`                    | [approvals.md](references/approvals.md)           |
| Revoke a token approval                                              | `approvals revoke`                    | [approvals.md](references/approvals.md)           |
| Send / transfer tokens                                               | `wallet send`                         | [send.md](references/send.md)                     |
| Resolve a domain name (e.g. .eth) to an address                      | `wallet resolve-domain`               | [domain-resolve.md](references/domain-resolve.md) |
| Send / transfer tokens to a domain name (e.g. alice.eth)             | `wallet resolve-domain` → `wallet send` | [domain-resolve.md](references/domain-resolve.md) |
| Swap tokens at market price                                          | `market-order swap`                   | [market-order.md](references/market-order.md)     |
| Get a swap quote without trading                                     | `market-order quote`                  | [market-order.md](references/market-order.md)     |
| List or check market order status                                    | `market-order list`                   | [market-order.md](references/market-order.md)     |
| Buy a token at a target price (limit order)                          | `limit-order buy`                     | [limit-order.md](references/limit-order.md)       |
| Sell a token at a target price (limit order)                         | `limit-order sell

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-20
   ✕BLOCK D 69 / 100

   first audit · source 6a2c72a97319

Questions about algo

• github.com/binance/binance-skills-hub — the audited source at commit 6a2c72a97319 and every finding aboveObserved · 20 Oct 2026

Spotted something wrong? Report a correction · Methodology