Agent skill · Audited from source

binance-agentic-wallet

skill · binance/binance-skills-hubLicence not declaredAudited 24 Oct 2026 · source 4c7c359e585f

★ 1,082pushed 1 day agoversion 1.13.0
✕BLOCKGrade D · 69/100 · 4 findings · 4c7c359
1,082repo stars · whole binance/binance-skills-hub

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 4c7c359e585f and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 4 findings, 2 critical or high. What it does: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “binance-agentic-wallet (binance/binance-skills-hub)”. Retrieved 24 Oct 2026. https://modelsatlas.com/skills/binance/binance-agentic-wallet

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 2 critical or high findings, starting with “Prompt injection” in SKILL.md:174. Do not install it without reading them.

Trust audit

Audit 0.4.1 · source read 24 Oct 2026

Trust score69/100✕BLOCK D
1 critical1 high1 medium1 low0 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL4
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.

Findings (4)

CRITICALPrompt injectionprompt.transfer_instruction · SKILL.md:174
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
When the user refers to any of these tokens by name (e.g., "send USDT", "swap BNB to USDT"), use the corresponding address from the following tables. For token names not listed here, use the `query-to
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.hide_from_user · references/market-order.md:56
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
1. **Do NOT tell the user the swap succeeded yet.** At most say it has been *submitted* and you are confirming.
Why
asks the agent to act without the user's knowledge
Fix
—
MEDIUMPrompt injectionprompt.conditional_escalation · SKILL.md:4
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
Why
No further detail recorded for this rule.
Fix
—
LOWPrompt injectionprompt.transfer_instruction · references/campaign.md:115
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
**Before submitting — confirm you can persist the credentials.** `jobId` + `jobToken` is the only credential that retrieves the report: there is no "list my jobs by address" endpoint, so a lost creden
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine

Audit 0.4.1 · source sha 4c7c359e585f · 24 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherbinance GitHub organizationOwner of the repository this skill is read from
  • Source folderbinance/binance-skills-hub/skills/binance-web3/binance-agentic-walletThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdict4c7c359e585fA new audit runs when the source changes
  • Repository statusNot archivedLast push 1 day ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

---
name: binance-agentic-wallet
description: |
  Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
  swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history,
  wallet settings, daily limit, slippage, MEV protection, supported chains,
  send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer,
  send to .ai Agent ID name,
  prediction market, place prediction, redeem winnings, prediction PnL,
  x402 payment, HTTP 402 Payment Required,
  check/revoke/manage token approvals,
  DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake,
  claim rewards/fees, health factor, APY, TVL,
  sign external transaction, contract call, sign message, EIP-712, developer mode,
  speed up/cancel/replace transaction, pending/stuck transactions,
  gas price, gas fee, network fee, fee levels, gas tiers,
  or any on-chain wallet operation.
metadata:
  author: binance-web3-team
  version: '1.13.0'
  requiredCliVersion: '1.11.0'
  openclaw:
    requires:
      bins:
        - baw
    install:
      - kind: node
        package: '@binance/agentic-wallet'
        bins: [baw]
        label: Install Binance Agentic Wallet CLI (npm)
---

# Binance Agentic Wallet Skill

This skill drives the `baw` CLI to manage a Binance Web3 wallet — sign-in/sign-out, balance and history queries, security settings, token transfers, DEX swaps (market orders), limit orders, order management, prediction market trading, x402 payments, and DeFi operations.

## Command Routing

| User Intent                                                          | Command                               | Reference                                         |
|----------------------------------------------------------------------|---------------------------------------|---------------------------------------------------|
| Campaign / 大赛 / bStock PnL competition; buy/sell a bStock (币股)    | (see reference)                       | [campaign.md](references/campaign.md)             |
| Sign in / connect wallet                                             | `auth signin` → `auth verify`         | [authentication.md](references/authentication.md) |
| Sign out / disconnect wallet                                         | `auth signout`                        | [authentication.md](references/authentication.md) |
| Check if wallet is connected                                         | `wallet status`                       | [wallet-view.md](references/wallet-view.md)       |
| List supported chains / available networks                           | `wallet chains`                       | [wallet-view.md](references/wallet-view.md)       |
| Query gas price / fee levels / network fee                           | `wallet gas-price`                    | [gas.md](references/gas.md)                       |
| Get my wallet address                                                | `wallet address`                      | [wallet-view.md](references/wallet-view.md)       |
| Check token balances                                                 | `wallet balance`                      | [wallet-view.md](references/wallet-view.md)       |
| View transaction history                                             | `wallet tx-history`                   | [wallet-view.md](references/wallet-view.md)       |
| View security settings and remaining daily quota                     | `wallet settings`                     | [wallet-setting.md](references/wallet-setting.md) |
| Check if any transactions are pending or require double-confirmation | `wallet tx-lock`                      | [wallet-view.md](references/wallet-view.md)       |
| Speed up a pending transaction                                       | `wallet speed-up`                     | [speedup-cancel.md](references/speedup-cancel.md) |
| Cancel a pending transaction                                         | `wallet cancel`                       | [speedup-cancel.md](references/speedup-cancel.md) |
| List pending transactions / stuck transactions                       | `wallet tx-history --type pending`    | [speedup-cancel.md](references/speedup-cancel.md) |
| Check wallet approvals / manage token authorizations                  | `approvals list`                      | [approvals.md](references/approvals.md)           |
| View approval details                                                | `approvals detail`                    | [approvals.md](references/approvals.md)           |
| Revoke a token approval                                              | `approvals revoke`                    | [approvals.md](references/approvals.md)           |
| Send / transfer tokens                                               | `wallet send`                         | [send.md](references/send.md)                     |
| Resolve a domain name (e.g. .eth) to an address                      | `wallet resolve-domain`               | [domain-resolve.md](references/domain-resolve.md) |
| Send / transfer tokens to a domain name (e.g. alice.eth)             | `wallet resolve-domain` → `wallet send` | [domain-resolve.md](references/domain-resolve.md) |
| Swap tokens at market price                                          | `market-order swap`                   | [market-order.md](references/market-order.md)     |
| Get a swap quote without trading                                     | `market-order quote`                  | [market-order.md](references/market-order.md)     |
| List or check market order status                                    | `market-order list`                   | [market-order.md](references/market-order.md)     |
| Buy a token at a target price (limit order)                          | `limit-order buy`                     | [limit-order.md](references/limit-order.md)       |
| Sell a token at a target price (limit order)                         | `limit-order sell

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 4c7c359

npm install -g @binance/agentic-wallet@${requiredCliVersion}

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 4c7c359e585f only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source 4c7c359e585f

README badge

For maintainers · shows the latest audit

ModelsAtlas: BLOCK DMODELSATLASBLOCK · D
[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/binance/binance-agentic-wallet/badge.svg)](https://modelsatlas.com/skills/binance/binance-agentic-wallet/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

crypto-market-rank✓SAFE

binance/binance-skills-hub

Crypto market leaderboards — ranked aggregate feeds across the whole market: social-hype/sentiment rank, trending / top-search / Binance Alpha / tokenized-stocks rank, smart-money net-inflow rank (which tokens received…

★ 1.1kGrade B
binance-sports-ai-analyzer✓SAFE

binance/binance-skills-hub

Use when users ask for World Cup or 世界杯 AI match predictions, WC assistant probabilities, World Cup news insights, master analysis, recomputing football match win rates with custom correction signals, or trading a…

★ 1.1kGrade B
binance✓SAFE

binance/binance-skills-hub

Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.

★ 1.1kGrade B
binance-tokenized-securities-info✕BLOCK

binance/binance-skills-hub

Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…

★ 1.1kGrade D
algo✕BLOCK

binance/binance-skills-hub

Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

★ 1.1kGrade D
convert✕BLOCK

binance/binance-skills-hub

Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

★ 1.1kGrade D

Add this badge to your README

[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/binance/binance-agentic-wallet/badge.svg)](https://modelsatlas.com/skills/binance/binance-agentic-wallet/)

Questions about binance-agentic-wallet

What does the binance-agentic-wallet skill do?
Binance Skills Hub is an open skills marketplace that gives AI agents native access to crypto
Is binance-agentic-wallet safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can binance-agentic-wallet access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does binance-agentic-wallet work with?
Its documentation mentions cursor and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4c7c359e585f), read on 2026-10-24. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.