p2p
Binance P2P trading assistant for natural-language queries about P2P/C2C market ads, the user's own P2P order history, order detail & appeal tracking, and advertisement publish & management. Use when the user asks about P2P prices, searching/choosing ads, comparing payment methods, reviewing P2P order history, checking order detail/appeal status, querying complaints, publishing/updating/managing P2P advertisements, or viewing merchant profiles. Do NOT use for spot/futures prices, exchange trading, deposits/withdrawals, on-chain transfers, or anything unrelated to P2P/C2C.
89
86%
Does it follow best practices?
Impact
97%
1.67xAverage score across 3 eval scenarios
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill programmatically fetches and interprets user-generated P2P ad text, merchant remarks/autoReplyMsg, complaint timelines and evidence file URLs from Binance endpoints (e.g., /bapi/c2c/v1/public/c2c/agent/ad-list, /sapi/v1/c2c/agent/ads/search, /sapi/v1/c2c/agent/ads/getDetailByNo and /sapi/v1/c2c/agent/complaint/get-complaint-flows which return remarkHtml, fileUrls and other user-supplied fields) and uses that content to drive recommendations, confirmation prompts, and follow-up actions (pricing, evidence submission, status changes), so untrusted third‑party content could materially influence agent behavior.
- Repository
- binance/binance-skills-hub
- Commit
8175b43
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.