Agent skill · Audited from source

convert

skill · binance/binance-skills-hubLicence not declaredAudited 27 Oct 2026 · source d5ceffaa95a3

★ 1,092pushed 1 day agoversion 2.0.0
✕BLOCKGrade D · 68/100 · 20 findings · d5ceffa
1,092repo stars · whole binance/binance-skills-hub

Is it safe? No — BLOCK, grade D (68/100). We read this skill's source at commit d5ceffaa95a3 and observed filesystem, network and shell access and no hard-coded secrets. The audit raised 20 findings, 11 critical or high. What it does: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “convert (binance/binance-skills-hub)”. Retrieved 27 Oct 2026. https://modelsatlas.com/skills/binance/convert

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 11 critical or high findings, starting with “Prompt injection” in skills/binance-web3/binance-agentic-wallet/SKILL.md:188. Do not install it without reading them.

2 skills are called “convert”. You are viewing binance/binance-skills-hub. 2 of them are BLOCK.

Trust audit

Audit 0.4.1 · source read 27 Oct 2026

Trust score68/100✕BLOCK D
3 critical8 high2 medium4 low3 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

  • FilesystemDeclared3 observations
  • NetworkDeclared6 observations
  • ShellDeclared1 observation
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codeWARN4
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL15
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.

Findings (20)

CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-agentic-wallet/SKILL.md:188
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
When the user refers to any of these tokens by name (e.g., "send USDT", "swap BNB to USDT"), use the corresponding address from the following tables. For token names not listed here, use the `query-to
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-onchain-copy-trader/SKILL.md:296
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
| Token audit | `POST https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit`, body `{binanceChainId, contractAddress, requestId}`. Returns `hasResult` `isSupported` `riskLeve
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-tokenized-securities-info/SKILL.md:590
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
3. **Icon and report URLs are relative paths — prepend domain to use**: The API returns relative paths for `icon`, `dailyAttestationReports`, and `monthlyAttestationReports` (e.g. `/images/web3-data/p
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.credential_read · skills/binance/onchain-pay/SKILL.md:96
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
### Step 1: Gather credentials
Why
asks the agent to read credentials
Fix
—
HIGHPrompt injectionprompt.credential_read · skills/binance/onchain-pay/SKILL.md:379
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Read the `.local.md` file from the same directory as this SKILL.md to load credentials.
Why
asks the agent to read credentials
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/agent-id-claim-status.md:59
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- **Service error (CLI code `20003008`)**: the Agent ID backend is temporarily unavailable. This is an error, NOT "not claimed" — retry later; do not tell the user they lack an Agent ID based on this
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/external-sign.md:5
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Developer Mode can only be enabled or configured in the Binance App. Use `baw wallet settings --json` to check whether Developer Mode is active before attempting external signing. **Check it as soon a
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/market-order.md:64
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
1. **Do NOT tell the user the swap succeeded yet.** At most say it has been *submitted* and you are confirming.
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-trading-signal/SKILL.md:305
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Backtest credit whitelist mechanism (`isWhiteList`) — never tell the user whether they are on a whitelist or what the whitelist differences are.
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrompt injectionprompt.hide_from_user · skills/binance/p2p/SKILL.md:418
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
> **MUST follow:** When `complaintStatus` is 0, 1, or 2 (appeal still active), NEVER tell the user to "go to the app" or "head to the dispute center". Always guide them to use this skill to submit evi
Why
asks the agent to act without the user's knowledge
Fix
—
HIGHPrivilege escalation / persistencereview.unsafe_action · skills/binance-web3/binance-agentic-wallet/SKILL.md
F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L2
the agent may **ask** the user whether to skip it
Why
Directs the agent to offer the user a bypass of a mandatory swap security pre-check, directing a dangerous action without the platform enforcing user confirmation.
Fix
rewrite it so the instruction says plainly what it does, and asks the user before it acts
MEDIUMInformation disclosuredisclose.log_secret · skills/binance/payment/send.py:241
F-12 Information disclosureCWE-209 · CWE-532Layer L1
print(f"   api_key:    {'…' + config.get('…', ''…'❌ Not set'}")
Why
No further detail recorded for this rule.
Fix
—
MEDIUMInformation disclosuredisclose.log_secret · skills/binance/square-post/scripts/save-key.mjs:8
F-12 Information disclosureCWE-209 · CWE-532Layer L1
console.log(`Usage: BINA…<apiKey> node scripts/save-key.mjs
Why
No further detail recorded for this rule.
Fix
—
LOWInventory / provenanceinv.hidden_file · skills/binance/onchain-pay/.local.md.example
F-13 Inventory / provenanceCWE-1104Layer L0
.local.md.example
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWObfuscation / stealthobf.decode_call · skills/binance/payment/send.py:883
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
image_bytes = base64.b64decode(base64_data)
Why
No further detail recorded for this rule.
Fix
—
LOWSupply chainsupply.unpinned · skills/binance/payment/requirements.txt
F-08 Supply chainCWE-829 · CWE-1357Layer L1
requests, opencv-python, pyzbar, Pillow
Why
4 requirement(s) not pinned with ==
Fix
pin exact versions
LOWPrompt injectionreview.reviewer_manipulation · skills/binance-web3/binance-agentic-wallet/SKILL.md
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Determine support **at runtime from the CLI's actual response** (try the `limit-order`
Why
No, this is normal runtime behavior guidance, not reviewer manipulation; the candidate escalation match does not map to reviewer-directed text.
Fix
rewrite it so the instruction says plainly what it does, and asks the user before it acts
INFOPrompt injectionprompt.conditional_escalation · skills/binance-web3/binance-agentic-wallet/SKILL.md:4
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.credential_read · skills/binance/fiat/references/sapi-endpoints.md:128
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
* Only read credentials explicitly needed for the current task
Why
asks the agent to read credentials
Fix
—
INFOPrompt injectionprompt.credential_read · skills/binance/square-post/README.md:33
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Scripts read the OpenAPI key in this order:
Why
asks the agent to read credentials
Fix
—

Audit 0.4.1 · source sha d5ceffaa95a3 · 27 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherbinance GitHub organizationOwner of the repository this skill is read from
  • Source folderbinance/binance-skills-hubThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdictd5ceffaa95a3A new audit runs when the source changes
  • Repository statusNot archivedLast push 1 day ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

---
name: binance-agentic-wallet
description: |
  Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
  swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history,
  wallet settings, daily limit, slippage, MEV protection, supported chains,
  send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer,
  send to .ai Agent ID name,
  Agent ID claim status, whether I claimed my .ai space id / Agent ID, get my .ai domain,
  prediction market, place prediction, redeem winnings, prediction PnL,
  x402 payment, HTTP 402 Payment Required,
  check/revoke/manage token approvals,
  DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake,
  claim rewards/fees, health factor, APY, TVL,
  sign external transaction, contract call, sign message, EIP-712, developer mode,
  speed up/cancel/replace transaction, pending/stuck transactions,
  gas price, gas fee, network fee, fee levels, gas tiers,
  or any on-chain wallet operation.
metadata:
  author: binance-web3-team
  version: '1.15.0'
  requiredCliVersion: '1.12.0'
  openclaw:
    requires:
      bins:
        - baw
    install:
      - kind: node
        package: '@binance/agentic-wallet'
        bins: [baw]
        label: Install Binance Agentic Wallet CLI (npm)
---

# Binance Agentic Wallet Skill

This skill drives the `baw` CLI to manage a Binance Web3 wallet — sign-in/sign-out, balance and history queries, security settings, token transfers, DEX swaps (market orders), limit orders, order management, prediction market trading, x402 payments, and DeFi operations.

## Command Routing

| User Intent                                                          | Command                               | Reference                                         |
|----------------------------------------------------------------------|---------------------------------------|---------------------------------------------------|
| Agent ID 专属内盘 / Agent ID exclusive token launch → 查看或买入       | (see reference)                       | [agent-id-exclusive-token-launches.md](references/agent-id-exclusive-token-launches.md) |
| Check if I have claimed an Agent ID / get my .ai domain               | `wallet agent-id`                     | [agent-id-claim-status.md](references/agent-id-claim-status.md) |
| Sign in / connect wallet                                             | `auth signin` → `auth verify`         | [authentication.md](references/authentication.md) |
| Sign out / disconnect wallet                                         | `auth signout`                        | [authentication.md](references/authentication.md) |
| Check if wallet is connected                                         | `wallet status`                       | [wallet-view.md](references/wallet-view.md)       |
| List supported chains / available networks                           | `wallet chains`                       | [wallet-view.md](references/wallet-view.md)       |
| Query gas price / fee levels / network fee                           | `wallet gas-price`                    | [gas.md](references/gas.md)                       |
| Get my wallet address                                                | `wallet address`                      | [wallet-view.md](references/wallet-view.md)       |
| Check token balances                                                 | `wallet balance`                      | [wallet-view.md](references/wallet-view.md)       |
| View transaction history                                             | `wallet tx-history`                   | [wallet-view.md](references/wallet-view.md)       |
| View security settings and remaining daily quota                     | `wallet settings`                     | [wallet-setting.md](references/wallet-setting.md) |
| Check if any transactions are pending or require double-confirmation | `wallet tx-lock`                      | [wallet-view.md](references/wallet-view.md)       |
| Speed up a pending transaction                                       | `wallet speed-up`                     | [speedup-cancel.md](references/speedup-cancel.md) |
| Cancel a pending transaction                                         | `wallet cancel`                       | [speedup-cancel.md](references/speedup-cancel.md) |
| List pending transactions / stuck transactions                       | `wallet tx-history --type pending`    | [speedup-cancel.md](references/speedup-cancel.md) |
| Check wallet approvals / manage token authorizations                  | `approvals list`                      | [approvals.md](references/approvals.md)           |
| View approval details                                                | `approvals detail`                    | [approvals.md](references/approvals.md)           |
| Revoke a token approval                                              | `approvals revoke`                    | [approvals.md](references/approvals.md)           |
| Send / transfer tokens                                               | `wallet send`                         | [send.md](references/send.md)                     |
| Resolve a domain name (e.g. .eth) to an address                      | `wallet resolve-domain`               | [domain-resolve.md](references/domain-resolve.md) |
| Send / transfer tokens to a domain name (e.g. alice.eth)             | `wallet resolve-domain` → `wallet send` | [domain-resolve.md](references/domain-resolve.md) |
| Swap tokens at market price                                          | `market-order swap`                   | [market-order.md](references/market-order.md)     |
| Get a swap quote without trading                                     | `market-order quote`                  | [market-order.md](references/market-order.md)     |
| List or check market order status                                    | `market-order list`                   | [ma

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit d5ceffa

npx skills add https://github.com/binance/binance-skills-hub
npm install -g @binance/agentic-wallet@${requiredCliVersion}
npm install -g @binance/agentic-wallet
pip install -r requirements.txt

Commands as the repository documents them: shown, never run by us. Our verdict covers commit d5ceffaa95a3 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 68 / 100

    first audit · source d5ceffaa95a3

README badge

For maintainers · shows the latest audit

ModelsAtlas: BLOCK DMODELSATLASBLOCK · D
[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/binance/convert/badge.svg)](https://modelsatlas.com/skills/binance/convert/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

crypto-market-rank✓SAFE

binance/binance-skills-hub

Crypto market leaderboards — ranked aggregate feeds across the whole market: social-hype/sentiment rank, trending / top-search / Binance Alpha / tokenized-stocks rank, smart-money net-inflow rank (which tokens received…

★ 1.1kGrade B
binance-sports-ai-analyzer✓SAFE

binance/binance-skills-hub

Use when users ask for World Cup or 世界杯 AI match predictions, WC assistant probabilities, World Cup news insights, master analysis, recomputing football match win rates with custom correction signals, or trading a…

★ 1.1kGrade B
binance✓SAFE

binance/binance-skills-hub

Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.

★ 1.1kGrade B
binance-tokenized-securities-info✕BLOCK

binance/binance-skills-hub

Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…

★ 1.1kGrade D
binance-agentic-wallet✕BLOCK

binance/binance-skills-hub

Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

★ 1.1kGrade D
algo✕BLOCK

binance/binance-skills-hub

Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…

★ 1.1kGrade D

Add this badge to your README

[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/binance/convert/badge.svg)](https://modelsatlas.com/skills/binance/convert/)

Questions about convert

What does the convert skill do?
Binance Skills Hub is an open skills marketplace that gives AI agents native access to crypto
Is convert safe to install?
No — not without reading the findings first. The audit graded it D (68/100) and found 11 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can convert access on my machine?
The audit observed that it reaches the network, runs shell commands and reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does convert work with?
Its documentation mentions claude-code, cursor and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d5ceffaa95a3), read on 2026-10-27. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.