扫描报告
0 /100
binance-event-contract-full-suite
5-skill Binance Event Contract trading suite: data fetcher, signal calculator, ICT recognizer, risk manager, and executor reporter — advisory mode only, no real trading
This skill consists entirely of markdown documentation files (6 SKILL.md files, 19.5 KB total) with zero executable code, scripts, or dependencies — presenting a completely benign security posture.
可以安装
No action required. This is a pure documentation package. Before production use, ensure the actual implementation code (when provided) follows the declared behavior in the SKILL.md files.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file I/O operations in any .md file |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md (root) declares only Binance REST/WebSocket API calls |
| 命令执行 | NONE | NONE | — | No shell commands, subprocess, or eval() found |
| 环境变量 | NONE | NONE | — | No os.environ or env variable access in any file |
| 技能调用 | READ | READ | ✓ 一致 | Signal calculator declares dependency on fetcher, ICT recognizer, and risk manag… |
| 剪贴板 | NONE | NONE | — | No clipboard access documented or present |
| 浏览器 | NONE | NONE | — | No browser automation documented or present |
| 数据库 | NONE | NONE | — | No database operations documented or present |
1 项发现
中危 外部 URL 外部 URL
https://api.binance.com SKILL.md:15 目录结构
6 文件 · 19.5 KB · 512 行 Markdown 6f · 512L
├─
▾
binance-executor
│ └─
SKILL.md
Markdown
├─
▾
binance-ict-recognizer
│ └─
SKILL.md
Markdown
├─
▾
binance-reporter
│ └─
SKILL.md
Markdown
├─
▾
binance-risk-manager
│ └─
SKILL.md
Markdown
├─
▾
binance-signal-calculator
│ └─
SKILL.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ Skill is 100% markdown documentation with zero executable code — no attack surface
✓ All 5 sub-skills (fetcher, executor, ICT recognizer, risk manager, reporter) are internally consistent in their declared behavior
✓ Binance API usage is explicitly scoped to only BTCUSDT & ETHUSDT pairs on official endpoints
✓ Clear boundary definitions in all SKILL.md files prohibit unauthorized operations (e.g., no real trading, no third-party data)
✓ Risk manager enforces documented safety limits (2% per trade, 10% daily circuit breaker, max 4 concurrent positions)
✓ No sensitive file paths (~/.ssh, ~/.aws, .env) are referenced anywhere
✓ No obfuscation techniques (base64, eval, encoded strings) detected
✓ No persistence mechanisms (cron, startup hooks) present in documentation
✓ Installation method uses only standard npx clawhub CLI (no curl|bash or direct script downloads)