Agent skill · Audited from source
binance-tokenized-securities-info
skill · binance/binance-skills-hubLicence not declaredAudited 26 Oct 2026 · source d5ceffaa95a3
Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit d5ceffaa95a3 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 1 finding, 1 critical or high. What it does: Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…
Cite
Cite this page
ModelsAtlas. “binance-tokenized-securities-info (binance/binance-skills-hub)”. Retrieved 26 Oct 2026. https://modelsatlas.com/skills/binance/binance-tokenized-securities-info
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 1 critical or high finding, starting with “Prompt injection” in SKILL.md:590. Do not install it without reading them.
Trust audit
Audit 0.4.1 · source read 26 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 1 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: critical finding, no behavioural pass, undeclared transfer.
Findings (1)
CRITICALPrompt injectionprompt.transfer_instruction · SKILL.md:590
3. **Icon and report URLs are relative paths — prepend domain to use**: The API returns relative paths for `icon`, `dailyAttestationReports`, and `monthlyAttestationReports` (e.g. `/images/web3-data/p
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
Audit 0.4.1 · source sha d5ceffaa95a3 · 26 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherbinance GitHub organizationOwner of the repository this skill is read from
- Source folderbinance/binance-skills-hub/skills/binance-web3/binance-tokenized-securities-infoThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdictd5ceffaa95a3A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…
---
name: binance-tokenized-securities-info
description: |
Query Ondo tokenized US stock data on Binance Web3.
Covers: supported stock token list, RWA metadata (company info, attestation reports),
market and per-asset trading status (with corporate action codes for earnings, dividends, splits),
real-time on-chain data (token price, holders, circulating supply, market cap),
US stock fundamentals (P/E, dividend yield, 52-week range), and token K-Line/candlestick charts.
Use this skill when users ask about:
- Tokenized stock price, holders, or on-chain data for specific tickers
- Whether a stock token is tradable, paused, or halted
- Ondo RWA token list or which US stocks are available on-chain
- Corporate actions affecting a token (dividends, stock splits, earnings halt)
- Stock token K-Line or candlestick chart data
- Comparing on-chain token price vs US stock price
NOT for general crypto tokens (BTC, ETH, SOL, etc.) — use query-token-info for those.
metadata:
author: binance-web3-team
version: "1.1"
---
# Binance Tokenized Securities Info Skill
## Overview
| API | Function | Use Case |
|---------------------|---------------------------|-----------------------------------------------------------------|
| Token Symbol List | List all tokenized stocks | Browse Ondo supported tickers, filter by type |
| RWA Meta | Tokenized stock metadata | Company info, concepts, attestation reports |
| Market Status | Overall market open/close | Check if Ondo market is currently trading |
| Asset Market Status | Per-asset trading status | Detect corporate actions (earnings, dividends, splits, mergers) |
| RWA Dynamic V2 | Full real-time data | On-chain price, holders, US stock fundamentals, order limits |
| Token K-Line | Candlestick charts | OHLC data for on-chain token price technical analysis |
## Recommended Workflows
| Scenario | Steps |
|--------------------------------------------------|----------------------------------------------------------------------------|
| Look up a stock's fundamentals and on-chain data | API 1 (get `chainId` + `contractAddress` by ticker) → API 5 (dynamic data) |
| Check if a stock token is tradable | API 3 (overall market status) → API 4 (per-asset status with reason code) |
| Research a tokenized stock | API 1 (find token) → API 2 (company metadata + attestation reports) |
| Get K-Line chart data | API 1 (find token) → API 6 (K-Line with interval) |
## Use Cases
1. **List Supported Stocks**: Get all Ondo tokenized tickers with chain and contract info
2. **Company Research**: Get company metadata, CEO, industry, concept tags, and attestation reports
3. **Market Status Check**: Determine if the Ondo market is open, closed, or in pre/post-market session
4. **Corporate Action Detection**: Check if a specific asset is paused or limited due to earnings, dividends, stock splits, mergers, or maintenance
5. **Real-Time Data**: Get on-chain price, holder count, circulating supply, US stock P/E, dividend yield, 52-week range, and order limits
6. **Technical Analysis**: Fetch token K-Line (candlestick) data with configurable intervals and time ranges
## Key Concept: Token ≠ Share
Each token represents `multiplier` shares of the underlying stock, **not exactly 1 share**. Most tokens have a multiplier near 1.0 (cumulative dividend adjustment), but stock-split tokens can be 5.0 or 10.0 (e.g. multiplier = 10.0 means 1 token = 10 shares).
```
referencePrice = tokenInfo.price ÷ sharesMultiplier
```
See Notes §6 for common multiplier categories.
## Supported Chains
| Chain | chainId |
|----------|---------|
| Ethereum | 1 |
| BSC | 56 |
---
## API 1: Token Symbol List
### Method: GET
**URL**:
```
https://www.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/rwa/stock/detail/list/ai
```
**Request Parameters**:
| Parameter | Type | Required | Description |
|-----------|---------|----------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| type | integer | No | Filter by platform: `1` = Ondo Finance (currently the only supported tokenized stock provider). Omit to return all platforms. **Use `type=1` to retrieve only Ondo tokens.** |
**Headers**: `Accept-Encoding: identity`
**Example**:
```bash
curl 'https://www.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/rwa/stock/detail/list/ai' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/1.1 (Skill)'
```
**Response**:
```json
{
"code": "000000",
"data": [
{
"chainId": "1",
"contractAddress": "<CONTRACT_ADDRESS>",
"symbol": "<TOKEN_SYMBOL_ON>",
"ticker": "<UNDERLYING_TICKER>",
"type": 1,
"multiplier": "1.021663864228987186"
},
{
"chainId": "56",
"contractAddress": "<CONTRACT_ADDRESS>",
"symbol": "<TOKEN_SYMBOL_ON>",
"ticker": "<UNDERLYING_TICKER>",
"type": 1,
"multiplier": "1.010063782256545489"
}
],
"success": true
}
```
**Response Fields** (each item in `data`):
| Field | Type | Description |
|-----------------|---------|---------------------------------------------------------------|
| chainId | string | Chain ID (`1` = Ethereum, `56` = BSC) Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit d5ceffa
git clone https://github.com/binance/binance-skills-hub git -C binance-skills-hub checkout d5ceffaa95a3
The author documents no install command, so this uses the repository directly. Our verdict covers commit d5ceffaa95a3 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✕BLOCK D 69 / 100
first audit · source
d5ceffaa95a3
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/binance/binance-tokenized-securities-info/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
binance/binance-skills-hub
Crypto market leaderboards — ranked aggregate feeds across the whole market: social-hype/sentiment rank, trending / top-search / Binance Alpha / tokenized-stocks rank, smart-money net-inflow rank (which tokens received…
binance/binance-skills-hub
Use when users ask for World Cup or 世界杯 AI match predictions, WC assistant probabilities, World Cup news insights, master analysis, recomputing football match win rates with custom correction signals, or trading a…
binance/binance-skills-hub
Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
Add this badge to your README
[](https://modelsatlas.com/skills/binance/binance-tokenized-securities-info/)
<a href="https://modelsatlas.com/skills/binance/binance-tokenized-securities-info/"><img src="https://modelsatlas.com/skills/binance/binance-tokenized-securities-info/badge.svg" alt="ModelsAtlas: BLOCK D"></a>
Questions about binance-tokenized-securities-info
What does the binance-tokenized-securities-info skill do?
Is binance-tokenized-securities-info safe to install?
What can binance-tokenized-securities-info access on my machine?
How current is this page?
Sources
- github.com/binance/binance-skills-hub/tree/main/skills/binance-w — the audited source at commit d5ceffaa95a3 and every finding aboveObserved · 26 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the binance-tokenized-securities-info skill do?
- Is binance-tokenized-securities-info safe to install?
- What can binance-tokenized-securities-info access on my machine?