Skills/ClawHub/binance-agentic-wallet

binance-agentic-wallet@1.9.0

VERIFIED· install only

Publisher claims: "Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings, daily limit, slippage, MEV protection, supported chains, prediction market, place pre" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher binance-skills-hub · publishing for 157 daysInstalls 1,117Last detonated 5d ago
$clawhub install binance-agentic-wallet
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
Prompt injectionSKILL.md:12 · Prompt injection — known jailbreak technique referencesign external transaction, contract call, sign message, EIP-712, developer mode,Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionskill-card.md:31 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileMitigation: Do not enable Developer Mode unless the exact contract call or message is understood; inspect parsed transaction, risks, and authority changes before execution.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
HIGH
Authorization escalation languageSKILL.md:12 · Authorization escalation languagesign external transaction, contract call, sign message, EIP-712, developer mode,Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Context shift attemptskill-card.md:31 · Context shift attempt — trying to change operational mode · informational: not an instruction fileMitigation: Do not enable Developer Mode unless the exact contract call or message is understood; inspect parsed transaction, risks, and authority changes before execution.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Authorization escalation languagereferences/wallet-setting.md:88 · Authorization escalation language · informational: not an instruction file- **developerModeQuotaUsed** — how much Developer Mode quota has been consumed today. Use this top-level field when explaining Developer Mode usage; never use `defiQuotaUsed` for Developer Mode.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Prompt injectionreferences/wallet-setting.md:75 · Prompt injection — known jailbreak technique reference · informational: not an instruction file…ction): DeFi `deposit` / `lp-add` only consume `defiQuotaUsed`. - **devMode** — Developer Mode status and daily quota for external signing (`contract-call` and `sign-message`…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/external-sign.md:3 · Prompt injection — known jailbreak technique reference · informational: not an instruction file# External Sign Use Developer Mode to preview and execute user-built contract calls and message signatures. These …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Context shift attemptreferences/wallet-setting.md:90 · Context shift attempt — trying to change operational mode · informational: not an instruction file… do not run `contract-call preview` or `sign-message preview`; tell the user to enable Developer Mode in the Binance App. - **devMode.expiresAt** — Developer Mode expiry time, as Un…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Prompt injectionreferences/wallet-setting.md:88 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **developerModeQuotaUsed** — how much Developer Mode quota has been consumed today. Use this top-level field when explaining Developer Mode usage; never use `defiQuotaUsed` for Developer Mode.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Authorization escalation languagereferences/external-sign.md:5 · Authorization escalation language · informational: not an instruction file…ation and security result, then execute only after explicit user confirmation. Developer Mode can only be enabled or configured in the Binance App. Use `baw wallet settings …Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Context shift attemptreferences/external-sign.md:5 · Context shift attempt — trying to change operational mode · informational: not an instruction file…re attempting external signing. If `devMode.enabled` is false, tell the user to enable Developer Mode in the Binance App instead of running preview. --- ## Safety Flow Always fol…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Prompt injectionskill-card.md:29 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileRisk: External contract calls and EIP-712 signatures can grant or change on-chain authority when Developer Mode is enabled.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Authorization escalation languageskill-card.md:31 · Authorization escalation language · informational: not an instruction fileMitigation: Do not enable Developer Mode unless the exact contract call or message is understood; inspect parsed transaction, risks, and authority changes before execution.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Authorization escalation languagereferences/external-sign.md:3 · Authorization escalation language · informational: not an instruction file# External Sign Use Developer Mode to preview and execute user-built contract calls and message signatures. These …Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Authorization escalation languageskill-card.md:29 · Authorization escalation language · informational: not an instruction fileRisk: External contract calls and EIP-712 signatures can grant or change on-chain authority when Developer Mode is enabled.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Authorization escalation languagereferences/wallet-setting.md:75 · Authorization escalation language · informational: not an instruction file…ction): DeFi `deposit` / `lp-add` only consume `defiQuotaUsed`. - **devMode** — Developer Mode status and daily quota for external signing (`contract-call` and `sign-message`…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Prompt injectionreferences/external-sign.md:5 · Prompt injection — known jailbreak technique reference · informational: not an instruction file…ation and security result, then execute only after explicit user confirmation. Developer Mode can only be enabled or configured in the Binance App. Use `baw wallet settings …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈5,462 tok
1 file · 17 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.