Trust Assessment
binance-enhanced received a trust score of 10/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 61 findings: 10 critical, 14 high, 36 medium, and 1 low severity. Key findings include Arbitrary command execution, Unsafe deserialization / dynamic eval, Hardcoded GitHub Token detected.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 0/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings61
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:41 | |
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:45 | |
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:46 | |
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:47 | |
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:53 | |
| CRITICAL | Arbitrary command execution Python shell execution (os.system, subprocess) Review all shell execution calls. Ensure commands are static (not built from user input), use absolute paths, and are strictly necessary. Prefer library APIs over shell commands. | Manifest | skills/s7cret/binance-enhanced/webhook-handler.py:56 | |
| CRITICAL | Hardcoded GitHub Token detected A hardcoded GitHub Token was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference. | Static | skills/s7cret/binance-enhanced/setup-github-integration.sh:9 | |
| CRITICAL | Hardcoded GitHub Token detected A hardcoded GitHub Token was found. Secrets should be stored in environment variables or a secret manager. Replace the hardcoded secret with an environment variable reference. | Static | skills/s7cret/binance-enhanced/setup-github-secure.sh:15 | |
| CRITICAL | Webhook handler executes untrusted install.sh The `webhook-handler.py` script, which processes GitHub push events, executes the `install.sh` script found within the cloned repository. The content of this `install.sh` comes directly from an external GitHub repository, which is an untrusted source. If an attacker can push a malicious `install.sh` to a repository monitored by this webhook, they can achieve arbitrary code execution on the host system running the webhook handler. Do not execute arbitrary scripts from untrusted sources. Instead, define a controlled set of actions or a manifest within the skill that the webhook handler can safely interpret and execute. If `install.sh` must be run, it should be strictly validated or run in a highly isolated, sandboxed environment. | LLM | webhook-handler.py:60 | |
| CRITICAL | Hardcoded GitHub token in setup script The `setup-github-integration.sh` script contains a hardcoded example GitHub token (`ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`). This token is then used directly in `curl` commands and embedded into the Git remote URL. While it's an example, its presence in a script that is copied and potentially executed as part of the skill setup poses a critical risk of credential leakage if not replaced or if the script is used as-is. Remove hardcoded sensitive credentials, even example ones, from source code. Use environment variables, secure prompts, or a secrets management system for all tokens. | LLM | setup-github-integration.sh:7 | |
| HIGH | Unsafe deserialization / dynamic eval Python builtins/import manipulation Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/s7cret/binance-enhanced/telegram-bot/bot.py:25 | |
| HIGH | Unsafe deserialization / dynamic eval Python builtins/import manipulation Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/s7cret/binance-enhanced/telegram-bot/utils.py:21 | |
| HIGH | Unsafe deserialization / dynamic eval Python builtins/import manipulation Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/s7cret/binance-enhanced/ux/telegram_bot_prototype.py:19 | |
| HIGH | Dangerous call: __import__() Call to '__import__()' detected in function '<module>'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/telegram-bot/bot.py:25 | |
| HIGH | Dangerous call: __import__() Call to '__import__()' detected in function '<module>'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/telegram-bot/utils.py:21 | |
| HIGH | Dangerous call: __import__() Call to '__import__()' detected in function '__init__'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/ux/telegram_bot_prototype.py:19 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:45 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:46 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:47 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:56 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:41 | |
| HIGH | Dangerous call: subprocess.run() Call to 'subprocess.run()' detected in function 'update_skill'. This can execute arbitrary code. Avoid using dangerous functions like exec/eval/os.system. Use safer alternatives. | Static | skills/s7cret/binance-enhanced/webhook-handler.py:53 | |
| HIGH | Webhook tokens stored unencrypted in local SQLite database The `telegram-bot/storage.py` module stores webhook URLs and their associated authentication tokens in plain text within a local SQLite database (`bot_storage.db`). If this database file is compromised, all registered webhook tokens are exposed, potentially allowing an attacker to impersonate the skill or access other services. Encrypt sensitive data like API tokens before storing them in the database. Use a robust encryption mechanism (e.g., AES-GCM with a key derived from a secure source) or integrate with a secrets management service. | LLM | telegram-bot/storage.py:39 | |
| HIGH | Python dependencies are not pinned to exact versions The `requirements.txt` file and `package.json` specify Python dependencies using minimum versions (e.g., `requests>=2.31.0`). This allows for any newer version to be installed, which could introduce breaking changes, new vulnerabilities, or unexpected behavior without explicit review. Pin all dependencies to exact versions (e.g., `requests==2.31.0`) to ensure deterministic builds and prevent unexpected updates. Alternatively, use a dependency management tool that generates lock files (e.g., `pip-tools` or `Poetry`). | LLM | requirements.txt:2 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/s7cret/binance-enhanced/security/keys_crypto.py:20 | |
| MEDIUM | Unsafe deserialization / dynamic eval Decryption followed by code execution Remove obfuscated code execution patterns. Legitimate code does not need base64-encoded payloads executed via eval, encrypted-then-executed blobs, or dynamic attribute resolution to call system functions. | Manifest | skills/s7cret/binance-enhanced/security/keys_crypto.py:87 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/s7cret/binance-enhanced/SKILL.md:1 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/s7cret/binance-enhanced/monitoring/telegram.py:9 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/s7cret/binance-enhanced/monitoring/webhook.py:9 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/s7cret/binance-enhanced/telegram-bot/bot.py:12 | |
| MEDIUM | Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/s7cret/binance-enhanced/install.sh:38 | |
| MEDIUM | Sensitive environment variable access: $GITHUB_TOKEN Access to sensitive environment variable '$GITHUB_TOKEN' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/s7cret/binance-enhanced/setup-github-integration.sh:15 | |
| MEDIUM | Sensitive environment variable access: $USER Access to sensitive environment variable '$USER' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/s7cret/binance-enhanced/setup-github-integration.sh:34 | |
| MEDIUM | Sensitive environment variable access: $USER Access to sensitive environment variable '$USER' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/s7cret/binance-enhanced/setup-github-secure.sh:23 | |
| MEDIUM | Sensitive environment variable access: $GITHUB_TOKEN Access to sensitive environment variable '$GITHUB_TOKEN' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/s7cret/binance-enhanced/setup-github-secure.sh:25 | |
| MEDIUM | Unpinned Python dependency version Requirement 'requests>=2.31.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:2 | |
| MEDIUM | Unpinned Python dependency version Requirement 'python-dotenv>=1.0.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:3 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pyyaml>=6.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:4 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pycryptodome>=3.20.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:7 | |
| MEDIUM | Unpinned Python dependency version Requirement 'aiohttp>=3.9.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:10 | |
| MEDIUM | Unpinned Python dependency version Requirement 'orjson>=3.9.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:11 | |
| MEDIUM | Unpinned Python dependency version Requirement 'jq>=1.6.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:12 | |
| MEDIUM | Unpinned Python dependency version Requirement 'flask>=3.0.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:15 | |
| MEDIUM | Unpinned Python dependency version Requirement 'python-telegram-bot>=20.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:16 | |
| MEDIUM | Unpinned Python dependency version Requirement 'openpyxl>=3.1.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:17 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pandas>=2.0.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:20 | |
| MEDIUM | Unpinned Python dependency version Requirement 'numpy>=1.24.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:21 | |
| MEDIUM | Unpinned Python dependency version Requirement 'ta-lib>=0.4.0 # Для технических индикаторов' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:22 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pytest>=7.4.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:25 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pytest-asyncio>=0.21.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:26 | |
| MEDIUM | Unpinned Python dependency version Requirement 'colorama>=0.4.0 # Цветной вывод в консоли' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:29 | |
| MEDIUM | Unpinned Python dependency version Requirement 'tabulate>=0.9.0 # Форматирование таблиц' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:30 | |
| MEDIUM | Unpinned Python dependency version Requirement 'progress>=1.6 # Индикаторы прогресса' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:31 | |
| MEDIUM | Unpinned Python dependency version Requirement 'plotly>=5.18.0 # Графики для дашборда' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:34 | |
| MEDIUM | Unpinned Python dependency version Requirement 'dash>=2.14.0 # Интерактивный дашборд' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:35 | |
| MEDIUM | Unpinned Python dependency version Requirement 'black>=23.0.0 # Форматирование кода' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:38 | |
| MEDIUM | Unpinned Python dependency version Requirement 'flake8>=6.0.0 # Линтинг' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:39 | |
| MEDIUM | Unpinned Python dependency version Requirement 'mypy>=1.5.0 # Проверка типов' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:40 | |
| MEDIUM | Unpinned Python dependency version Requirement 'pre-commit>=3.5.0 # Pre-commit хуки' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/s7cret/binance-enhanced/requirements.txt:41 | |
| MEDIUM | Flask debug mode can be enabled in webhook handler The `webhook-handler.py` script can be run with Flask's debug mode enabled if the `FLASK_DEBUG` environment variable is set to `true`. Running Flask in debug mode in a production environment is a significant security risk, as it can expose sensitive information (e.g., stack traces, environment variables) and allow arbitrary code execution through the debugger. Ensure that debug mode is explicitly disabled in production environments. Use separate configuration profiles for development and production, or remove the ability to enable debug mode via environment variables in production deployments. | LLM | webhook-handler.py:109 | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/s7cret/binance-enhanced/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/7bf0455ecda5e228)
Powered by SkillShield