MoneySharks

Fully autonomous 24/7 Aster DEX perpetual futures trading agent. Manages the complete lifecycle — onboarding, live execution, bracket orders, trailing stop m...

This package appears to do exactly what it claims: autonomous trading on Aster DEX using your ASTER_API_KEY and ASTER_API_SECRET. Before installing or enabling live mode, consider these practical safeguards: - Test in paper mode first. The default/paper flows are supported; run paper for several days and review trades.json and logs before switching to live. - Use an exchange API key with the least privileges necessary. If possible, create a dedicated trading API key with explicit trade permissions and IP restrictions rather than using an account-wide key. Understand the key's permissions (withdrawals, margin changes, etc.) and remove anything not required. - Review and limit max_leverage, max_daily_loss, max_total_exposure in config.json to amounts you can afford to lose. The code enforces 'hard risk limits', but operational errors or exchange anomalies still carry risk. - Read onboarding and consent text carefully. The skill requires you to type ACCEPT to enable autonomous_live; the agent claims it cannot set autonomous_live_consent for you. Keep a copy of the consent and confirm the cron jobs that will be registered. - Audit the aster_readonly_client.py / live_execution_adapter.py files (present in the bundle) to verify which endpoints are used and how signatures are built. If you are not comfortable, run the code in a sandbox or inspect network calls with a sandboxed API key. - Ensure you have a documented and tested emergency halt procedure (scripts/halt.py exists). Test halting (in a safe environment) and verify the cron jobs/services can be disabled. - Keep this skill isolated from high-value accounts. Prefer a low-balance or dedicated trading account while you gain confidence. If you want, I can: summarize the specific files that perform live-orders and cron registration, highlight where the API key/secret are used in code, or list the exact cron jobs that will be registered and when they will run.

Type: OpenClaw Skill Name: moneysharks Version: 1.0.2 The MoneySharks skill bundle is a well-architected autonomous trading agent for Aster DEX. It implements a complete trading lifecycle including market analysis, risk enforcement, and self-learning. Security-wise, it follows best practices by using environment variables for API secrets (never storing them in config files), employing HMAC-SHA256 signing for authenticated requests, and enforcing hard safety limits like daily loss caps and isolated margin. The autonomous execution via OpenClaw cron jobs is the stated purpose of the skill and is protected by a mandatory 'Consent Gate' during onboarding (onboarding.py). No evidence of malicious intent, data exfiltration, or obfuscation was found across the 29 scripts and extensive documentation.