Agent skill · Audited from source
convert
skill · binance/binance-skills-hubLicence not declaredAudited 27 Oct 2026 · source d5ceffaa95a3
Is it safe? No — BLOCK, grade D (68/100). We read this skill's source at commit d5ceffaa95a3 and observed filesystem, network and shell access and no hard-coded secrets. The audit raised 20 findings, 11 critical or high. What it does: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
Cite
Cite this page
ModelsAtlas. “convert (binance/binance-skills-hub)”. Retrieved 27 Oct 2026. https://modelsatlas.com/skills/binance/convert
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 11 critical or high findings, starting with “Prompt injection” in skills/binance-web3/binance-agentic-wallet/SKILL.md:188. Do not install it without reading them.
2 skills are called “convert”. You are viewing binance/binance-skills-hub. 2 of them are BLOCK.
- binance/binance-skills-hub★ 1.1k✕BLOCK
- binance/binance-skills-hub★ 1.1k✕BLOCK
Trust audit
Audit 0.4.1 · source read 27 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.
What the source does
- FilesystemDeclared3 observations
- NetworkDeclared6 observations
- ShellDeclared1 observation
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | WARN | 4 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 15 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: critical finding, instruction override, no behavioural pass, undeclared transfer.
Findings (20)
CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-agentic-wallet/SKILL.md:188
When the user refers to any of these tokens by name (e.g., "send USDT", "swap BNB to USDT"), use the corresponding address from the following tables. For token names not listed here, use the `query-to
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-onchain-copy-trader/SKILL.md:296
| Token audit | `POST https://web3.binance.com/bapi/defi/v1/public/wallet-direct/security/token/audit`, body `{binanceChainId, contractAddress, requestId}`. Returns `hasResult` `isSupported` `riskLeve- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
CRITICALPrompt injectionprompt.transfer_instruction · skills/binance-web3/binance-tokenized-securities-info/SKILL.md:590
3. **Icon and report URLs are relative paths — prepend domain to use**: The API returns relative paths for `icon`, `dailyAttestationReports`, and `monthlyAttestationReports` (e.g. `/images/web3-data/p
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
HIGHPrompt injectionprompt.credential_read · skills/binance/onchain-pay/SKILL.md:96
### Step 1: Gather credentials
- Why
- asks the agent to read credentials
- Fix
- —
HIGHPrompt injectionprompt.credential_read · skills/binance/onchain-pay/SKILL.md:379
Read the `.local.md` file from the same directory as this SKILL.md to load credentials.
- Why
- asks the agent to read credentials
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/agent-id-claim-status.md:59
- **Service error (CLI code `20003008`)**: the Agent ID backend is temporarily unavailable. This is an error, NOT "not claimed" — retry later; do not tell the user they lack an Agent ID based on this
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/external-sign.md:5
Developer Mode can only be enabled or configured in the Binance App. Use `baw wallet settings --json` to check whether Developer Mode is active before attempting external signing. **Check it as soon a
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-agentic-wallet/references/market-order.md:64
1. **Do NOT tell the user the swap succeeded yet.** At most say it has been *submitted* and you are confirming.
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/binance-web3/binance-trading-signal/SKILL.md:305
- Backtest credit whitelist mechanism (`isWhiteList`) — never tell the user whether they are on a whitelist or what the whitelist differences are.
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrompt injectionprompt.hide_from_user · skills/binance/p2p/SKILL.md:418
> **MUST follow:** When `complaintStatus` is 0, 1, or 2 (appeal still active), NEVER tell the user to "go to the app" or "head to the dispute center". Always guide them to use this skill to submit evi
- Why
- asks the agent to act without the user's knowledge
- Fix
- —
HIGHPrivilege escalation / persistencereview.unsafe_action · skills/binance-web3/binance-agentic-wallet/SKILL.md
the agent may **ask** the user whether to skip it
- Why
- Directs the agent to offer the user a bypass of a mandatory swap security pre-check, directing a dangerous action without the platform enforcing user confirmation.
- Fix
- rewrite it so the instruction says plainly what it does, and asks the user before it acts
MEDIUMInformation disclosuredisclose.log_secret · skills/binance/payment/send.py:241
print(f" api_key: {'…' + config.get('…', ''…'❌ Not set'}")- Why
- No further detail recorded for this rule.
- Fix
- —
MEDIUMInformation disclosuredisclose.log_secret · skills/binance/square-post/scripts/save-key.mjs:8
console.log(`Usage: BINA…<apiKey> node scripts/save-key.mjs
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWObfuscation / stealthobf.decode_call · skills/binance/payment/send.py:883
image_bytes = base64.b64decode(base64_data)
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainsupply.unpinned · skills/binance/payment/requirements.txt
requests, opencv-python, pyzbar, Pillow
- Why
- 4 requirement(s) not pinned with ==
- Fix
- pin exact versions
LOWPrompt injectionreview.reviewer_manipulation · skills/binance-web3/binance-agentic-wallet/SKILL.md
Determine support **at runtime from the CLI's actual response** (try the `limit-order`
- Why
- No, this is normal runtime behavior guidance, not reviewer manipulation; the candidate escalation match does not map to reviewer-directed text.
- Fix
- rewrite it so the instruction says plainly what it does, and asks the user before it acts
INFOPrompt injectionprompt.conditional_escalation · skills/binance-web3/binance-agentic-wallet/SKILL.md:4
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.credential_read · skills/binance/fiat/references/sapi-endpoints.md:128
* Only read credentials explicitly needed for the current task
- Why
- asks the agent to read credentials
- Fix
- —
INFOPrompt injectionprompt.credential_read · skills/binance/square-post/README.md:33
Scripts read the OpenAPI key in this order:
- Why
- asks the agent to read credentials
- Fix
- —
Audit 0.4.1 · source sha d5ceffaa95a3 · 27 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherbinance GitHub organizationOwner of the repository this skill is read from
- Source folderbinance/binance-skills-hubThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdictd5ceffaa95a3A new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
---
name: binance-agentic-wallet
description: |
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens,
swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history,
wallet settings, daily limit, slippage, MEV protection, supported chains,
send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer,
send to .ai Agent ID name,
Agent ID claim status, whether I claimed my .ai space id / Agent ID, get my .ai domain,
prediction market, place prediction, redeem winnings, prediction PnL,
x402 payment, HTTP 402 Payment Required,
check/revoke/manage token approvals,
DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake,
claim rewards/fees, health factor, APY, TVL,
sign external transaction, contract call, sign message, EIP-712, developer mode,
speed up/cancel/replace transaction, pending/stuck transactions,
gas price, gas fee, network fee, fee levels, gas tiers,
or any on-chain wallet operation.
metadata:
author: binance-web3-team
version: '1.15.0'
requiredCliVersion: '1.12.0'
openclaw:
requires:
bins:
- baw
install:
- kind: node
package: '@binance/agentic-wallet'
bins: [baw]
label: Install Binance Agentic Wallet CLI (npm)
---
# Binance Agentic Wallet Skill
This skill drives the `baw` CLI to manage a Binance Web3 wallet — sign-in/sign-out, balance and history queries, security settings, token transfers, DEX swaps (market orders), limit orders, order management, prediction market trading, x402 payments, and DeFi operations.
## Command Routing
| User Intent | Command | Reference |
|----------------------------------------------------------------------|---------------------------------------|---------------------------------------------------|
| Agent ID 专属内盘 / Agent ID exclusive token launch → 查看或买入 | (see reference) | [agent-id-exclusive-token-launches.md](references/agent-id-exclusive-token-launches.md) |
| Check if I have claimed an Agent ID / get my .ai domain | `wallet agent-id` | [agent-id-claim-status.md](references/agent-id-claim-status.md) |
| Sign in / connect wallet | `auth signin` → `auth verify` | [authentication.md](references/authentication.md) |
| Sign out / disconnect wallet | `auth signout` | [authentication.md](references/authentication.md) |
| Check if wallet is connected | `wallet status` | [wallet-view.md](references/wallet-view.md) |
| List supported chains / available networks | `wallet chains` | [wallet-view.md](references/wallet-view.md) |
| Query gas price / fee levels / network fee | `wallet gas-price` | [gas.md](references/gas.md) |
| Get my wallet address | `wallet address` | [wallet-view.md](references/wallet-view.md) |
| Check token balances | `wallet balance` | [wallet-view.md](references/wallet-view.md) |
| View transaction history | `wallet tx-history` | [wallet-view.md](references/wallet-view.md) |
| View security settings and remaining daily quota | `wallet settings` | [wallet-setting.md](references/wallet-setting.md) |
| Check if any transactions are pending or require double-confirmation | `wallet tx-lock` | [wallet-view.md](references/wallet-view.md) |
| Speed up a pending transaction | `wallet speed-up` | [speedup-cancel.md](references/speedup-cancel.md) |
| Cancel a pending transaction | `wallet cancel` | [speedup-cancel.md](references/speedup-cancel.md) |
| List pending transactions / stuck transactions | `wallet tx-history --type pending` | [speedup-cancel.md](references/speedup-cancel.md) |
| Check wallet approvals / manage token authorizations | `approvals list` | [approvals.md](references/approvals.md) |
| View approval details | `approvals detail` | [approvals.md](references/approvals.md) |
| Revoke a token approval | `approvals revoke` | [approvals.md](references/approvals.md) |
| Send / transfer tokens | `wallet send` | [send.md](references/send.md) |
| Resolve a domain name (e.g. .eth) to an address | `wallet resolve-domain` | [domain-resolve.md](references/domain-resolve.md) |
| Send / transfer tokens to a domain name (e.g. alice.eth) | `wallet resolve-domain` → `wallet send` | [domain-resolve.md](references/domain-resolve.md) |
| Swap tokens at market price | `market-order swap` | [market-order.md](references/market-order.md) |
| Get a swap quote without trading | `market-order quote` | [market-order.md](references/market-order.md) |
| List or check market order status | `market-order list` | [maExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit d5ceffa
npx skills add https://github.com/binance/binance-skills-hub
npm install -g @binance/agentic-wallet@${requiredCliVersion}
npm install -g @binance/agentic-wallet
pip install -r requirements.txtgit clone https://github.com/binance/binance-skills-hub git -C binance-skills-hub checkout d5ceffaa95a3
Commands as the repository documents them: shown, never run by us. Our verdict covers commit d5ceffaa95a3 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✕BLOCK D 68 / 100
first audit · source
d5ceffaa95a3
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/binance/convert/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
binance/binance-skills-hub
Crypto market leaderboards — ranked aggregate feeds across the whole market: social-hype/sentiment rank, trending / top-search / Binance Alpha / tokenized-stocks rank, smart-money net-inflow rank (which tokens received…
binance/binance-skills-hub
Use when users ask for World Cup or 世界杯 AI match predictions, WC assistant probabilities, World Cup news insights, master analysis, recomputing football match win rates with custom correction signals, or trading a…
binance/binance-skills-hub
Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.
binance/binance-skills-hub
Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
binance/binance-skills-hub
Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings,…
Add this badge to your README
[](https://modelsatlas.com/skills/binance/convert/)
<a href="https://modelsatlas.com/skills/binance/convert/"><img src="https://modelsatlas.com/skills/binance/convert/badge.svg" alt="ModelsAtlas: BLOCK D"></a>
Questions about convert
What does the convert skill do?
Is convert safe to install?
What can convert access on my machine?
Which assistants does convert work with?
How current is this page?
Sources
- github.com/binance/binance-skills-hub — the audited source at commit d5ceffaa95a3 and every finding aboveObserved · 27 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the convert skill do?
- Is convert safe to install?
- What can convert access on my machine?