Skills/skills.sh/binance-agentic-wallet

binance-agentic-wallet@r3

VERIFIED

Publisher claims: "Use when the user mentions wallet connect/sign in/sign out, check balance, send/transfer tokens, swap/buy/sell tokens, DEX trade, limit/market order, cancel order, get a quote, transaction history, wallet settings, daily limit, slippage, MEV protection, supported chains, send to ENS domain, send to .eth or .bnb name, resolve domain name to address, domain-based transfer, send to .ai Agent ID name, Agent ID claim status, whether I claimed my .ai space id / Agent ID, get my .ai domain, prediction market, place prediction, redeem winnings, prediction PnL, x402 payment, HTTP 402 Payment Required, check/revoke/manage token approvals, DeFi protocols, staking, liquidity pool, LP, yield farming, deposit, redeem, stake, unstake, claim rewards/fees, health factor, APY, TVL, sign external transaction, contract call, sign message, EIP-712, developer mode, speed up/cancel/replace transaction, pending/stuck transactions, gas price, gas fee, network fee, fee levels, gas tiers, or any on-chain wallet operation. " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher binance · joined 4 days agoInstalls 17,838Last detonated 1 h ago

$npx skills add binance-agentic-wallet

Watch Report an issue

Is binance-agentic-wallet@r3 safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 82/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Prompt injectionreferences/agent-id-exclusive-token-launches.md:80 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionreferences/wallet-setting.md:75 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Context shift attemptreferences/wallet-setting.md:90 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/limit-order.md:15 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionreferences/external-sign.md:7 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

HIGH

Authorization escalation languageSKILL.md:15 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/agent-id-exclusive-token-launches.md:83 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/external-sign.md:3 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

HIGH

Authorization escalation languageSKILL.md:143 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/wallet-setting.md:88 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

HIGH

Authorization escalation languagereferences/agent-id-exclusive-token-launches.md:82 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/external-sign.md:5 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Context shift attemptreferences/agent-id-exclusive-token-launches.md:599 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/preflight.md:88 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionreferences/agent-id-exclusive-token-launches.md:23 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionSKILL.md:15 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionSKILL.md:143 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

Prompt injectionreferences/agent-id-exclusive-token-launches.md:83 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

HIGH

Authorization escalation languagereferences/agent-id-exclusive-token-launches.md:80 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

CRITICAL

Prompt injectionreferences/agent-id-exclusive-token-launches.md:82 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

HIGH

Authorization escalation languagereferences/agent-id-exclusive-token-launches.md:23 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/wallet-setting.md:88 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/wallet-setting.md:75 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/preflight.md:88 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/external-sign.md:3 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/external-sign.md:7 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/external-sign.md:5 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Authorization escalation languagereferences/limit-order.md:15 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01