Agent skill · Audited from source
binance-agentic-wallet
skill · binance/binance-skills-hubLicence not declaredAudited 24 Oct 2026 · source 4c7c359e585f
Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 4c7c359e585f and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 4 findings, 2 critical or high. What it does: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
Cite
Cite this page
ModelsAtlas. “binance-agentic-wallet (binance/binance-skills-hub)”. Retrieved 24 Oct 2026. https://modelsatlas.com/skills/binance/binance-agentic-wallet
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 2 critical or high findings, starting with “Prompt injection” in SKILL.md:174. Do not install it without reading them.
Trust audit
Audit 0.4.1 · source read 24 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 4 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.
Findings (4)
CRITICALPrompt injectionprompt.transfer_instruction · SKILL.md:174
When the user refers to any of these tokens by name (e.g., "send USDT", "swap BNB to USDT"), use the corresponding address from the following tables. For token names not listed here, use the `query-to
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.hide_from_user · references/market-order.md:56
1. **Do NOT tell the user the swap succeeded yet.** At most say it has been *submitted* and you are confirming.
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
MEDIUMPrompt injectionprompt.conditional_escalation · SKILL.md:4
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.transfer_instruction · references/campaign.md:115
**Before submitting — confirm you can persist the credentials.** `jobId` + `jobToken` is the only credential that retrieves the report: there is no "list my jobs by address" endpoint, so a lost creden
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
Audit 0.4.1 · source sha 4c7c359e585f · 24 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherbinance GitHub organizationOwner of the repository this skill is read from
- Source folderbinance/binance-skills-hub/skills/binance-web3/binance-agentic-walletThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict4c7c359e585fA new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
---
name: binance-agentic-wallet
description: |
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history,
wallet settings, daily limit, slippage, MEV protection, supported chains,
send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer,
send to .ai Agent ID name,
prediction market, place prediction, redeem winnings, prediction PnL,
x402 payment, HTTP 402 Payment Required,
check/revoke/manage token approvals,
DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake,
claim rewards/fees, health factor, APY, TVL,
sign external transaction, contract call, sign message, EIP-712, developer mode,
speed up/cancel/replace transaction, pending/stuck transactions,
gas price, gas fee, network fee, fee levels, gas tiers,
or any on-chain wallet operation.
metadata:
author: binance-web3-team
version: '1.13.0'
requiredCliVersion: '1.11.0'
openclaw:
requires:
bins:
- baw
install:
- kind: node
package: '@binance/agentic-wallet'
bins: [baw]
label: Install Binance Agentic Wallet CLI (npm)
---
# Binance Agentic Wallet Skill
This skill drives the `baw` CLI to manage a Binance Web3 wallet — sign-in/sign-out, balance and history queries, security settings, token transfers, DEX swaps (market orders), limit orders, order management, prediction market trading, x402 payments, and DeFi operations.
## Command Routing
| User Intent | Command | Reference |
|----------------------------------------------------------------------|---------------------------------------|---------------------------------------------------|
| Campaign / 大赛 / bStock PnL competition; buy/sell a bStock (币股) | (see reference) | [campaign.md](references/campaign.md) |
| Sign in / connect wallet | `auth signin` → `auth verify` | [authentication.md](references/authentication.md) |
| Sign out / disconnect wallet | `auth signout` | [authentication.md](references/authentication.md) |
| Check if wallet is connected | `wallet status` | [wallet-view.md](references/wallet-view.md) |
| List supported chains / available networks | `wallet chains` | [wallet-view.md](references/wallet-view.md) |
| Query gas price / fee levels / network fee | `wallet gas-price` | [gas.md](references/gas.md) |
| Get my wallet address | `wallet address` | [wallet-view.md](references/wallet-view.md) |
| Check token balances | `wallet balance` | [wallet-view.md](references/wallet-view.md) |
| View transaction history | `wallet tx-history` | [wallet-view.md](references/wallet-view.md) |
| View security settings and remaining daily quota | `wallet settings` | [wallet-setting.md](references/wallet-setting.md) |
| Check if any transactions are pending or require double-confirmation | `wallet tx-lock` | [wallet-view.md](references/wallet-view.md) |
| Speed up a pending transaction | `wallet speed-up` | [speedup-cancel.md](references/speedup-cancel.md) |
| Cancel a pending transaction | `wallet cancel` | [speedup-cancel.md](references/speedup-cancel.md) |
| List pending transactions / stuck transactions | `wallet tx-history --type pending` | [speedup-cancel.md](references/speedup-cancel.md) |
| Check wallet approvals / manage token authorizations | `approvals list` | [approvals.md](references/approvals.md) |
| View approval details | `approvals detail` | [approvals.md](references/approvals.md) |
| Revoke a token approval | `approvals revoke` | [approvals.md](references/approvals.md) |
| Send / transfer tokens | `wallet send` | [send.md](references/send.md) |
| Resolve a domain name (e.g. .eth) to an address | `wallet resolve-domain` | [domain-resolve.md](references/domain-resolve.md) |
| Send / transfer tokens to a domain name (e.g. alice.eth) | `wallet resolve-domain` → `wallet send` | [domain-resolve.md](references/domain-resolve.md) |
| Swap tokens at market price | `market-order swap` | [market-order.md](references/market-order.md) |
| Get a swap quote without trading | `market-order quote` | [market-order.md](references/market-order.md) |
| List or check market order status | `market-order list` | [market-order.md](references/market-order.md) |
| Buy a token at a target price (limit order) | `limit-order buy` | [limit-order.md](references/limit-order.md) |
| Sell a token at a target price (limit order) | `limit-order sellExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 4c7c359
npm install -g @binance/agentic-wallet@${requiredCliVersion}git clone https://github.com/binance/binance-skills-hub git -C binance-skills-hub checkout 4c7c359e585f
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 4c7c359e585f only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✕BLOCK D 69 / 100
first audit · source
4c7c359e585f
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/binance/binance-agentic-wallet/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
binance/binance-skills-hub
Crypto market leaderboards — ranked aggregate feeds across the whole market: social-hype/sentiment rank, trending / top-search / Binance Alpha / tokenized-stocks rank, smart-money net-inflow rank (which tokens received…
binance/binance-skills-hub
Use when users ask for World Cup or 世界杯 AI match predictions, WC assistant probabilities, World Cup news insights, master analysis, recomputing football match win rates with custom correction signals, or trading a…
binance/binance-skills-hub
Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.
binance/binance-skills-hub
Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
Add this badge to your README
[](https://modelsatlas.com/skills/binance/binance-agentic-wallet/)
<a href="https://modelsatlas.com/skills/binance/binance-agentic-wallet/"><img src="https://modelsatlas.com/skills/binance/binance-agentic-wallet/badge.svg" alt="ModelsAtlas: BLOCK D"></a>
Questions about binance-agentic-wallet
What does the binance-agentic-wallet skill do?
Is binance-agentic-wallet safe to install?
What can binance-agentic-wallet access on my machine?
Which assistants does binance-agentic-wallet work with?
How current is this page?
Sources
- github.com/binance/binance-skills-hub/tree/main/skills/binance-w — the audited source at commit 4c7c359e585f and every finding aboveObserved · 24 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the binance-agentic-wallet skill do?
- Is binance-agentic-wallet safe to install?
- What can binance-agentic-wallet access on my machine?